Zultys Security Advisory Notice - SAN26-004 Rev 1.0

MX-SE, MX-SE II, MX-E and MX-Virtual systems

None

Not applicable

Not applicable

On May 13, 2026 details of vulnerabilities in the NGINX ngx_http_charset_module were published in the CVE Vulnerability Database under CVE-2026-42934.

The vulnerabilities may allow an unauthenticated attacker to send requests which cause a heap buffer over-read leading to limited disclosure of memory or a restart.

Zultys have evaluated the reported vulnerability and confirmed that the MX-SE, MX-SE II, MX-E and MX-Virtual products are not impacted.

If additional information is required contact support@zultys.com or your Authorized Zultys Channel Partner.