점검 대응높음KEV 미등록
CVE-2026-27784
F5 NGINX Open Source, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support 취약점
The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to over-read or over-write NGINX worker memory resulting in its termination, using a specially crafted MP4 file. The issue only affects 32-bit NGINX Open Source if it is built with the ngx_http_mp4_module module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted MP4 file with the ngx_http_mp4_module module. Note: Software versions which have reached...
- 대응 우선순위
- 점검
- CVSS
- 8.5
- EPSS
- 1.03% 백분위 60.4% · 2026.08.04 기준
- CISA KEV
- 미등록
- 조치 기한
- -
- 공개일
- 2026.03.25