CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-32647

NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to trigger a buffer over-read or over-write to the NGINX worker memory resulting in its termination or possibly code execution, using a specially crafted MP4 file. This issue affects NGINX Open Source and NGINX Plus if it is built with the ngx_http_mp4_module module and the mp4 directive is used in the configuration file. Additionally, the attack is possible only if an attacker can trigger the processing of a specially crafted MP4 file with the ngx_http_mp4_module module. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 2.1%

CVSS Severity

CVSS v3 Score 7.8

References

https://my.f5.com/manage/s/article/K000160366

Products affected by CVE-2026-32647

F5 » Nginx Open Source » Version: 1.1.19

cpe:2.3:a:f5:nginx_open_source:1.1.19
F5 » Nginx Open Source » Version: 1.11.0

cpe:2.3:a:f5:nginx_open_source:1.11.0
F5 » Nginx Open Source » Version: 1.11.1

cpe:2.3:a:f5:nginx_open_source:1.11.1
F5 » Nginx Open Source » Version: 1.11.10

cpe:2.3:a:f5:nginx_open_source:1.11.10
F5 » Nginx Open Source » Version: 1.11.11

cpe:2.3:a:f5:nginx_open_source:1.11.11
F5 » Nginx Open Source » Version: 1.11.12

cpe:2.3:a:f5:nginx_open_source:1.11.12
F5 » Nginx Open Source » Version: 1.11.13

cpe:2.3:a:f5:nginx_open_source:1.11.13
F5 » Nginx Open Source » Version: 1.11.2

cpe:2.3:a:f5:nginx_open_source:1.11.2
F5 » Nginx Open Source » Version: 1.11.3

cpe:2.3:a:f5:nginx_open_source:1.11.3
F5 » Nginx Open Source » Version: 1.11.4

cpe:2.3:a:f5:nginx_open_source:1.11.4
F5 » Nginx Open Source » Version: 1.11.5

cpe:2.3:a:f5:nginx_open_source:1.11.5
F5 » Nginx Open Source » Version: 1.11.6

cpe:2.3:a:f5:nginx_open_source:1.11.6
F5 » Nginx Open Source » Version: 1.11.7

cpe:2.3:a:f5:nginx_open_source:1.11.7
F5 » Nginx Open Source » Version: 1.11.8

cpe:2.3:a:f5:nginx_open_source:1.11.8
F5 » Nginx Open Source » Version: 1.11.9

cpe:2.3:a:f5:nginx_open_source:1.11.9
F5 » Nginx Open Source » Version: 1.13.0

cpe:2.3:a:f5:nginx_open_source:1.13.0
F5 » Nginx Open Source » Version: 1.13.1

cpe:2.3:a:f5:nginx_open_source:1.13.1
F5 » Nginx Open Source » Version: 1.13.10

cpe:2.3:a:f5:nginx_open_source:1.13.10
F5 » Nginx Open Source » Version: 1.13.11

cpe:2.3:a:f5:nginx_open_source:1.13.11
F5 » Nginx Open Source » Version: 1.13.12

cpe:2.3:a:f5:nginx_open_source:1.13.12
F5 » Nginx Open Source » Version: 1.13.2

cpe:2.3:a:f5:nginx_open_source:1.13.2
F5 » Nginx Open Source » Version: 1.13.3

cpe:2.3:a:f5:nginx_open_source:1.13.3
F5 » Nginx Open Source » Version: 1.13.4

cpe:2.3:a:f5:nginx_open_source:1.13.4
F5 » Nginx Open Source » Version: 1.13.5

cpe:2.3:a:f5:nginx_open_source:1.13.5
F5 » Nginx Open Source » Version: 1.13.6

cpe:2.3:a:f5:nginx_open_source:1.13.6
F5 » Nginx Open Source » Version: 1.13.7

cpe:2.3:a:f5:nginx_open_source:1.13.7
F5 » Nginx Open Source » Version: 1.13.8

cpe:2.3:a:f5:nginx_open_source:1.13.8
F5 » Nginx Open Source » Version: 1.13.9

cpe:2.3:a:f5:nginx_open_source:1.13.9
F5 » Nginx Open Source » Version: 1.15.0

cpe:2.3:a:f5:nginx_open_source:1.15.0
F5 » Nginx Open Source » Version: 1.15.1

cpe:2.3:a:f5:nginx_open_source:1.15.1
F5 » Nginx Open Source » Version: 1.15.10

cpe:2.3:a:f5:nginx_open_source:1.15.10
F5 » Nginx Open Source » Version: 1.15.11

cpe:2.3:a:f5:nginx_open_source:1.15.11
F5 » Nginx Open Source » Version: 1.15.12

cpe:2.3:a:f5:nginx_open_source:1.15.12
F5 » Nginx Open Source » Version: 1.15.2

cpe:2.3:a:f5:nginx_open_source:1.15.2
F5 » Nginx Open Source » Version: 1.15.3

cpe:2.3:a:f5:nginx_open_source:1.15.3
F5 » Nginx Open Source » Version: 1.15.4

cpe:2.3:a:f5:nginx_open_source:1.15.4
F5 » Nginx Open Source » Version: 1.15.5

cpe:2.3:a:f5:nginx_open_source:1.15.5
F5 » Nginx Open Source » Version: 1.15.6

cpe:2.3:a:f5:nginx_open_source:1.15.6
F5 » Nginx Open Source » Version: 1.15.7

cpe:2.3:a:f5:nginx_open_source:1.15.7
F5 » Nginx Open Source » Version: 1.15.8

cpe:2.3:a:f5:nginx_open_source:1.15.8
F5 » Nginx Open Source » Version: 1.15.9

cpe:2.3:a:f5:nginx_open_source:1.15.9
F5 » Nginx Open Source » Version: 1.17.0

cpe:2.3:a:f5:nginx_open_source:1.17.0
F5 » Nginx Open Source » Version: 1.17.1

cpe:2.3:a:f5:nginx_open_source:1.17.1
F5 » Nginx Open Source » Version: 1.17.10

cpe:2.3:a:f5:nginx_open_source:1.17.10
F5 » Nginx Open Source » Version: 1.17.2

cpe:2.3:a:f5:nginx_open_source:1.17.2
F5 » Nginx Open Source » Version: 1.17.3

cpe:2.3:a:f5:nginx_open_source:1.17.3
F5 » Nginx Open Source » Version: 1.17.4

cpe:2.3:a:f5:nginx_open_source:1.17.4
F5 » Nginx Open Source » Version: 1.17.5

cpe:2.3:a:f5:nginx_open_source:1.17.5
F5 » Nginx Open Source » Version: 1.17.6

cpe:2.3:a:f5:nginx_open_source:1.17.6
F5 » Nginx Open Source » Version: 1.17.7

cpe:2.3:a:f5:nginx_open_source:1.17.7
F5 » Nginx Open Source » Version: 1.17.8

cpe:2.3:a:f5:nginx_open_source:1.17.8
F5 » Nginx Open Source » Version: 1.17.9

cpe:2.3:a:f5:nginx_open_source:1.17.9
F5 » Nginx Open Source » Version: 1.19.0

cpe:2.3:a:f5:nginx_open_source:1.19.0
F5 » Nginx Open Source » Version: 1.19.1

cpe:2.3:a:f5:nginx_open_source:1.19.1
F5 » Nginx Open Source » Version: 1.19.10

cpe:2.3:a:f5:nginx_open_source:1.19.10
F5 » Nginx Open Source » Version: 1.19.2

cpe:2.3:a:f5:nginx_open_source:1.19.2
F5 » Nginx Open Source » Version: 1.19.3

cpe:2.3:a:f5:nginx_open_source:1.19.3
F5 » Nginx Open Source » Version: 1.19.4

cpe:2.3:a:f5:nginx_open_source:1.19.4
F5 » Nginx Open Source » Version: 1.19.5

cpe:2.3:a:f5:nginx_open_source:1.19.5
F5 » Nginx Open Source » Version: 1.19.6

cpe:2.3:a:f5:nginx_open_source:1.19.6
F5 » Nginx Open Source » Version: 1.19.7

cpe:2.3:a:f5:nginx_open_source:1.19.7
F5 » Nginx Open Source » Version: 1.19.8

cpe:2.3:a:f5:nginx_open_source:1.19.8
F5 » Nginx Open Source » Version: 1.19.9

cpe:2.3:a:f5:nginx_open_source:1.19.9
F5 » Nginx Open Source » Version: 1.2.0

cpe:2.3:a:f5:nginx_open_source:1.2.0
F5 » Nginx Open Source » Version: 1.21.0

cpe:2.3:a:f5:nginx_open_source:1.21.0
F5 » Nginx Open Source » Version: 1.21.1

cpe:2.3:a:f5:nginx_open_source:1.21.1
F5 » Nginx Open Source » Version: 1.21.2

cpe:2.3:a:f5:nginx_open_source:1.21.2
F5 » Nginx Open Source » Version: 1.21.3

cpe:2.3:a:f5:nginx_open_source:1.21.3
F5 » Nginx Open Source » Version: 1.21.4

cpe:2.3:a:f5:nginx_open_source:1.21.4
F5 » Nginx Open Source » Version: 1.21.5

cpe:2.3:a:f5:nginx_open_source:1.21.5
F5 » Nginx Open Source » Version: 1.21.6

cpe:2.3:a:f5:nginx_open_source:1.21.6
F5 » Nginx Open Source » Version: 1.23.0

cpe:2.3:a:f5:nginx_open_source:1.23.0
F5 » Nginx Open Source » Version: 1.23.1

cpe:2.3:a:f5:nginx_open_source:1.23.1
F5 » Nginx Open Source » Version: 1.23.2

cpe:2.3:a:f5:nginx_open_source:1.23.2
F5 » Nginx Open Source » Version: 1.23.3

cpe:2.3:a:f5:nginx_open_source:1.23.3
F5 » Nginx Open Source » Version: 1.23.4

cpe:2.3:a:f5:nginx_open_source:1.23.4
F5 » Nginx Open Source » Version: 1.25.0

cpe:2.3:a:f5:nginx_open_source:1.25.0
F5 » Nginx Open Source » Version: 1.25.1

cpe:2.3:a:f5:nginx_open_source:1.25.1
F5 » Nginx Open Source » Version: 1.25.2

cpe:2.3:a:f5:nginx_open_source:1.25.2
F5 » Nginx Open Source » Version: 1.25.3

cpe:2.3:a:f5:nginx_open_source:1.25.3
F5 » Nginx Open Source » Version: 1.25.4

cpe:2.3:a:f5:nginx_open_source:1.25.4
F5 » Nginx Open Source » Version: 1.25.5

cpe:2.3:a:f5:nginx_open_source:1.25.5
F5 » Nginx Open Source » Version: 1.26.1

cpe:2.3:a:f5:nginx_open_source:1.26.1
F5 » Nginx Open Source » Version: 1.26.2

cpe:2.3:a:f5:nginx_open_source:1.26.2
F5 » Nginx Open Source » Version: 1.27.0

cpe:2.3:a:f5:nginx_open_source:1.27.0
F5 » Nginx Open Source » Version: 1.27.1

cpe:2.3:a:f5:nginx_open_source:1.27.1
F5 » Nginx Open Source » Version: 1.27.2

cpe:2.3:a:f5:nginx_open_source:1.27.2
F5 » Nginx Open Source » Version: 1.27.3

cpe:2.3:a:f5:nginx_open_source:1.27.3
F5 » Nginx Open Source » Version: 1.27.4

cpe:2.3:a:f5:nginx_open_source:1.27.4
F5 » Nginx Open Source » Version: 1.27.5

cpe:2.3:a:f5:nginx_open_source:1.27.5
F5 » Nginx Open Source » Version: 1.28.2

cpe:2.3:a:f5:nginx_open_source:1.28.2
F5 » Nginx Open Source » Version: 1.29.0

cpe:2.3:a:f5:nginx_open_source:1.29.0
F5 » Nginx Open Source » Version: 1.29.1

cpe:2.3:a:f5:nginx_open_source:1.29.1
F5 » Nginx Open Source » Version: 1.29.2

cpe:2.3:a:f5:nginx_open_source:1.29.2
F5 » Nginx Open Source » Version: 1.29.3

cpe:2.3:a:f5:nginx_open_source:1.29.3
F5 » Nginx Open Source » Version: 1.29.4

cpe:2.3:a:f5:nginx_open_source:1.29.4
F5 » Nginx Open Source » Version: 1.29.5

cpe:2.3:a:f5:nginx_open_source:1.29.5
F5 » Nginx Open Source » Version: 1.29.6

cpe:2.3:a:f5:nginx_open_source:1.29.6
F5 » Nginx Open Source » Version: 1.3.0

cpe:2.3:a:f5:nginx_open_source:1.3.0
F5 » Nginx Open Source » Version: 1.3.1

cpe:2.3:a:f5:nginx_open_source:1.3.1
F5 » Nginx Open Source » Version: 1.3.10

cpe:2.3:a:f5:nginx_open_source:1.3.10
F5 » Nginx Open Source » Version: 1.3.11

cpe:2.3:a:f5:nginx_open_source:1.3.11
F5 » Nginx Open Source » Version: 1.3.12

cpe:2.3:a:f5:nginx_open_source:1.3.12
F5 » Nginx Open Source » Version: 1.3.13

cpe:2.3:a:f5:nginx_open_source:1.3.13
F5 » Nginx Open Source » Version: 1.3.14

cpe:2.3:a:f5:nginx_open_source:1.3.14
F5 » Nginx Open Source » Version: 1.3.15

cpe:2.3:a:f5:nginx_open_source:1.3.15
F5 » Nginx Open Source » Version: 1.3.16

cpe:2.3:a:f5:nginx_open_source:1.3.16
F5 » Nginx Open Source » Version: 1.3.2

cpe:2.3:a:f5:nginx_open_source:1.3.2
F5 » Nginx Open Source » Version: 1.3.3

cpe:2.3:a:f5:nginx_open_source:1.3.3
F5 » Nginx Open Source » Version: 1.3.4

cpe:2.3:a:f5:nginx_open_source:1.3.4
F5 » Nginx Open Source » Version: 1.3.5

cpe:2.3:a:f5:nginx_open_source:1.3.5
F5 » Nginx Open Source » Version: 1.3.6

cpe:2.3:a:f5:nginx_open_source:1.3.6
F5 » Nginx Open Source » Version: 1.3.7

cpe:2.3:a:f5:nginx_open_source:1.3.7
F5 » Nginx Open Source » Version: 1.3.8

cpe:2.3:a:f5:nginx_open_source:1.3.8
F5 » Nginx Open Source » Version: 1.3.9

cpe:2.3:a:f5:nginx_open_source:1.3.9
F5 » Nginx Open Source » Version: 1.4.0

cpe:2.3:a:f5:nginx_open_source:1.4.0
F5 » Nginx Open Source » Version: 1.5.0

cpe:2.3:a:f5:nginx_open_source:1.5.0
F5 » Nginx Open Source » Version: 1.5.1

cpe:2.3:a:f5:nginx_open_source:1.5.1
F5 » Nginx Open Source » Version: 1.5.10

cpe:2.3:a:f5:nginx_open_source:1.5.10
F5 » Nginx Open Source » Version: 1.5.11

cpe:2.3:a:f5:nginx_open_source:1.5.11
F5 » Nginx Open Source » Version: 1.5.12

cpe:2.3:a:f5:nginx_open_source:1.5.12
F5 » Nginx Open Source » Version: 1.5.13

cpe:2.3:a:f5:nginx_open_source:1.5.13
F5 » Nginx Open Source » Version: 1.5.2

cpe:2.3:a:f5:nginx_open_source:1.5.2
F5 » Nginx Open Source » Version: 1.5.3

cpe:2.3:a:f5:nginx_open_source:1.5.3
F5 » Nginx Open Source » Version: 1.5.4

cpe:2.3:a:f5:nginx_open_source:1.5.4
F5 » Nginx Open Source » Version: 1.5.5

cpe:2.3:a:f5:nginx_open_source:1.5.5
F5 » Nginx Open Source » Version: 1.5.6

cpe:2.3:a:f5:nginx_open_source:1.5.6
F5 » Nginx Open Source » Version: 1.5.7

cpe:2.3:a:f5:nginx_open_source:1.5.7
F5 » Nginx Open Source » Version: 1.5.8

cpe:2.3:a:f5:nginx_open_source:1.5.8
F5 » Nginx Open Source » Version: 1.5.9

cpe:2.3:a:f5:nginx_open_source:1.5.9
F5 » Nginx Open Source » Version: 1.7.0

cpe:2.3:a:f5:nginx_open_source:1.7.0
F5 » Nginx Open Source » Version: 1.7.1

cpe:2.3:a:f5:nginx_open_source:1.7.1
F5 » Nginx Open Source » Version: 1.7.10

cpe:2.3:a:f5:nginx_open_source:1.7.10
F5 » Nginx Open Source » Version: 1.7.11

cpe:2.3:a:f5:nginx_open_source:1.7.11
F5 » Nginx Open Source » Version: 1.7.12

cpe:2.3:a:f5:nginx_open_source:1.7.12
F5 » Nginx Open Source » Version: 1.7.2

cpe:2.3:a:f5:nginx_open_source:1.7.2
F5 » Nginx Open Source » Version: 1.7.3

cpe:2.3:a:f5:nginx_open_source:1.7.3
F5 » Nginx Open Source » Version: 1.7.4

cpe:2.3:a:f5:nginx_open_source:1.7.4
F5 » Nginx Open Source » Version: 1.7.5

cpe:2.3:a:f5:nginx_open_source:1.7.5
F5 » Nginx Open Source » Version: 1.7.6

cpe:2.3:a:f5:nginx_open_source:1.7.6
F5 » Nginx Open Source » Version: 1.7.7

cpe:2.3:a:f5:nginx_open_source:1.7.7
F5 » Nginx Open Source » Version: 1.7.8

cpe:2.3:a:f5:nginx_open_source:1.7.8
F5 » Nginx Open Source » Version: 1.7.9

cpe:2.3:a:f5:nginx_open_source:1.7.9
F5 » Nginx Open Source » Version: 1.9.0

cpe:2.3:a:f5:nginx_open_source:1.9.0
F5 » Nginx Open Source » Version: 1.9.1

cpe:2.3:a:f5:nginx_open_source:1.9.1
F5 » Nginx Open Source » Version: 1.9.10

cpe:2.3:a:f5:nginx_open_source:1.9.10
F5 » Nginx Open Source » Version: 1.9.11

cpe:2.3:a:f5:nginx_open_source:1.9.11
F5 » Nginx Open Source » Version: 1.9.12

cpe:2.3:a:f5:nginx_open_source:1.9.12
F5 » Nginx Open Source » Version: 1.9.13

cpe:2.3:a:f5:nginx_open_source:1.9.13
F5 » Nginx Open Source » Version: 1.9.14

cpe:2.3:a:f5:nginx_open_source:1.9.14
F5 » Nginx Open Source » Version: 1.9.15

cpe:2.3:a:f5:nginx_open_source:1.9.15
F5 » Nginx Open Source » Version: 1.9.2

cpe:2.3:a:f5:nginx_open_source:1.9.2
F5 » Nginx Open Source » Version: 1.9.3

cpe:2.3:a:f5:nginx_open_source:1.9.3
F5 » Nginx Open Source » Version: 1.9.4

cpe:2.3:a:f5:nginx_open_source:1.9.4
F5 » Nginx Open Source » Version: 1.9.5

cpe:2.3:a:f5:nginx_open_source:1.9.5
F5 » Nginx Open Source » Version: 1.9.6

cpe:2.3:a:f5:nginx_open_source:1.9.6
F5 » Nginx Open Source » Version: 1.9.7

cpe:2.3:a:f5:nginx_open_source:1.9.7
F5 » Nginx Open Source » Version: 1.9.8

cpe:2.3:a:f5:nginx_open_source:1.9.8
F5 » Nginx Open Source » Version: 1.9.9

cpe:2.3:a:f5:nginx_open_source:1.9.9
F5 » Nginx Plus » Version: r32

cpe:2.3:a:f5:nginx_plus:r32
F5 » Nginx Plus » Version: r33

cpe:2.3:a:f5:nginx_plus:r33
F5 » Nginx Plus » Version: r34

cpe:2.3:a:f5:nginx_plus:r34
F5 » Nginx Plus » Version: r35

cpe:2.3:a:f5:nginx_plus:r35
F5 » Nginx Plus » Version: r36

cpe:2.3:a:f5:nginx_plus:r36

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-32647

Products

Pricing

Contact Us