Количество 22
Количество 22
BDU:2026-04818
Уязвимость модуля ngx_http_mp4_module веб-серверов NGINX Open Source, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20260622-73-0043
Уязвимость angie
ROS-20260508-73-0017
Уязвимость nginx
CVE-2026-27784
The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to over-read or over-write NGINX worker memory resulting in its termination, using a specially crafted MP4 file. The issue only affects 32-bit NGINX Open Source if it is built with the ngx_http_mp4_module module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted MP4 file with the ngx_http_mp4_module module. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2026-27784
The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to over-read or over-write NGINX worker memory resulting in its termination, using a specially crafted MP4 file. The issue only affects 32-bit NGINX Open Source if it is built with the ngx_http_mp4_module module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted MP4 file with the ngx_http_mp4_module module. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2026-27784
The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to over-read or over-write NGINX worker memory resulting in its termination, using a specially crafted MP4 file. The issue only affects 32-bit NGINX Open Source if it is built with the ngx_http_mp4_module module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted MP4 file with the ngx_http_mp4_module module. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2026-27784
NGINX ngx_http_mp4_module vulnerability
CVE-2026-27784
The 32-bit implementation of NGINX Open Source has a vulnerability in ...
GHSA-hwq5-42j9-jvqj
The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to over-read or over-write NGINX worker memory resulting in its termination, using a specially crafted MP4 file. The issue only affects 32-bit NGINX Open Source if it is built with the ngx_http_mp4_module module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted MP4 file with the ngx_http_mp4_module module. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
SUSE-SU-2026:1953-1
Security update for nginx
SUSE-SU-2026:1761-1
Security update for nginx
RLSA-2026:7343
Important: nginx:1.26 security update
RLSA-2026:7002
Important: nginx security update
RLSA-2026:6923
Important: nginx:1.24 security update
RLSA-2026:6907
Important: nginx:1.24 security update
RLSA-2026:6906
Important: nginx security update
ELSA-2026-7343
ELSA-2026-7343: nginx:1.26 security update (IMPORTANT)
ELSA-2026-7002
ELSA-2026-7002: nginx security update (IMPORTANT)
ELSA-2026-6923
ELSA-2026-6923: nginx:1.24 security update (IMPORTANT)
ELSA-2026-6907
ELSA-2026-6907: nginx:1.24 security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-04818 Уязвимость модуля ngx_http_mp4_module веб-серверов NGINX Open Source, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.8 | 1% Низкий | 4 месяца назад |
 | ROS-20260622-73-0043 Уязвимость angie | CVSS3: 7.8 | 1% Низкий | около 1 месяца назад |
| ROS-20260508-73-0017 Уязвимость nginx | CVSS3: 7.8 | 1% Низкий | 3 месяца назад |
 | CVE-2026-27784 The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to over-read or over-write NGINX worker memory resulting in its termination, using a specially crafted MP4 file. The issue only affects 32-bit NGINX Open Source if it is built with the ngx_http_mp4_module module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted MP4 file with the ngx_http_mp4_module module. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. | CVSS3: 7.8 | 1% Низкий | 4 месяца назад |
 | CVE-2026-27784 The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to over-read or over-write NGINX worker memory resulting in its termination, using a specially crafted MP4 file. The issue only affects 32-bit NGINX Open Source if it is built with the ngx_http_mp4_module module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted MP4 file with the ngx_http_mp4_module module. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. | CVSS3: 7.5 | 1% Низкий | 4 месяца назад |
 | CVE-2026-27784 The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to over-read or over-write NGINX worker memory resulting in its termination, using a specially crafted MP4 file. The issue only affects 32-bit NGINX Open Source if it is built with the ngx_http_mp4_module module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted MP4 file with the ngx_http_mp4_module module. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. | CVSS3: 7.8 | 1% Низкий | 4 месяца назад |
 | CVE-2026-27784 NGINX ngx_http_mp4_module vulnerability | CVSS3: 7.8 | 1% Низкий | 4 месяца назад |
| CVE-2026-27784 The 32-bit implementation of NGINX Open Source has a vulnerability in ... | CVSS3: 7.8 | 1% Низкий | 4 месяца назад |
| GHSA-hwq5-42j9-jvqj The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to over-read or over-write NGINX worker memory resulting in its termination, using a specially crafted MP4 file. The issue only affects 32-bit NGINX Open Source if it is built with the ngx_http_mp4_module module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted MP4 file with the ngx_http_mp4_module module. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. | CVSS3: 7.8 | 1% Низкий | 4 месяца назад |
 | SUSE-SU-2026:1953-1 Security update for nginx | 2 месяца назад | ||
| SUSE-SU-2026:1761-1 Security update for nginx | 3 месяца назад | ||
 | RLSA-2026:7343 Important: nginx:1.26 security update | 4 месяца назад | ||
| RLSA-2026:7002 Important: nginx security update | 2 месяца назад | ||
| RLSA-2026:6923 Important: nginx:1.24 security update | 4 месяца назад | ||
| RLSA-2026:6907 Important: nginx:1.24 security update | 4 месяца назад | ||
| RLSA-2026:6906 Important: nginx security update | 4 месяца назад | ||
| ELSA-2026-7343 ELSA-2026-7343: nginx:1.26 security update (IMPORTANT) | 4 месяца назад | ||
| ELSA-2026-7002 ELSA-2026-7002: nginx security update (IMPORTANT) | 4 месяца назад | ||
| ELSA-2026-6923 ELSA-2026-6923: nginx:1.24 security update (IMPORTANT) | 4 месяца назад | ||
| ELSA-2026-6907 ELSA-2026-6907: nginx:1.24 security update (IMPORTANT) | 4 месяца назад |
Уязвимостей на страницу