IP-DB.com
Türkçe English Deutsch Español
Log In Get API Key
7.8High

CVE-2026-27784NGINX ngx_http_mp4_module vulnerability

F5 NGINX Open Source; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 8 Published: (7 months ago)

Description

The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to over-read or over-write NGINX worker memory resulting in its termination, using a specially crafted MP4 file. The issue only affects 32-bit NGINX Open Source if it is built with the ngx_http_mp4_module module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted MP4 file with the ngx_http_mp4_module module. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Weakness (CWE): CWE-190

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
F5 NGINX Open Source 1.29.0 – < 1.29.7, 1.1.19 – < 1.28.3
Red Hat Red Hat Enterprise Linux 10 all versions
Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support all versions
Red Hat Red Hat Enterprise Linux 8 all versions
Red Hat Red Hat Enterprise Linux 9 all versions
Red Hat Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions all versions
Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions all versions
Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support all versions
Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support all versions
Red Hat Red Hat Hardened Images all versions
Red Hat Red Hat Update Infrastructure 5 all versions
rhui 5 —

References and patches

CPE matches (NVD) (2)
  • cpe:2.3:a:f5:nginx_open_source:*:*:*:*:*:*:*:* ≥ 1.1.19 < 1.28.3
  • cpe:2.3:a:f5:nginx_open_source:*:*:*:*:*:*:*:* ≥ 1.29.0 < 1.29.7

Recent CVEs in the same product — nginx

5.3Medium
CVE-2026-95101

NGINX ngx_http_v3_module vulnerability

F5 NGINX Plus; F5 NGINX Open Source

Description NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3 with proxy_request_buffering on directive, an unauthenticated attacker may be able to inject data in the proxied request. Impact This vu…

8.1High
CVE-2026-93479

NGINX map directive and regex matching vulnerability

F5 NGINX Plus; F5 NGINX Open Source

A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format references the map's regex capture variables before referencing the map output variable. Alternatively, the same re…

1.2%EPSS
8.1High
CVE-2026-97205

NGINX ngx_http_core_module vulnerability

F5 NGINX Plus; F5 NGINX Open Source

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module. When asynchronous file I/O (AIO) is enabled in certain configurations, processing a Server Side Includes (SSI) page containing “include virtual” commands may trigger a U…

8.1High
CVE-2026-15176

NGINX ngx_http_core_module vulnerability

F5 NGINX Plus; F5 NGINX Open Source

A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return directive referencing the $request_filename variable. Alternatively, the same result could be achi…

6.5Medium
CVE-2026-97629

NGINX ngx_http_ssl_module vulnerability

F5 NGINX Plus; F5 NGINX Open Source

Description When NGINX Plus or NGINX Open Source is configured with ssl_session_cache shared:name:size without an explicit ssl_session_ticket_key file directives to automatically rotate SSL session ticket keys, a remote unauthenticated attacker is able to …

6.5Medium
CVE-2026-90439

NGINX ngx_http_v3_module vulnerability

F5 NGINX Plus; F5 NGINX Open Source

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3 with OpenSSL versions <= OpenSSL 3.5.0 under certain configurations, a limited heap buffer overflow could happen while processing a TLS handshake. This c…