CVE-2026-27784

Name of the Vulnerable Software and Affected Versions NGINX Open Source (affected versions not specified)

Description The 32-bit implementation of NGINX Open Source contains an issue within the ngx http mp4 module module. This can allow an attacker to read from or write to NGINX worker memory, potentially causing the service to terminate. The issue requires a specially crafted MP4 file to be processed by the ngx http mp4 module module. This is only possible if the NGINX Open Source installation is 32-bit, built with the ngx http mp4 module module, and the mp4 directive is used in the configuration file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.