Back Cybersecuritynews

F5 NGINX Plus and Open Source Vulnerability Allow Attackers to Execute Code Using MP4 file

Cybersecuritynews •Abinaya • March 25, 2026

A high-severity vulnerability has been disclosed affecting both NGINX Open Source and NGINX Plus. Tracked formally as CVE-2026-32647, this security flaw carries a CVSS v4.0 base score of 8.5 and a CVSS v3.1 score of 7.8. It allows local, authenticated attackers to trigger a denial-of-service (DoS) condition or potentially execute arbitrary code on the underlying […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

F5 NGINX Plus & Open Source Vulnerability Allows Code Execution via MP4 Files F5 has disclosed a high-severity vulnerability, tracked as CVE-2026-32647, affecting both NGINX Plus and NGINX Open Source. This flaw allows attackers to execute arbitrary code or trigger a denial-of-service (DoS) condition by exploiting crafted MP4 files. The vulnerability specifically impacts deployments where the MP4 streaming module is enabled in the server configuration. The CVSS v4.0 base score for this vulnerability is 8.5, indicating a significant risk. Affected systems include any NGINX installations with the MP4 module active. Security teams are advised to review their configurations and apply necessary mitigations. The vulnerability was published on March 24, 2026, and is currently under scrutiny for potential exploits. 2 sources 69

Extracted Entities

F5 NGINX Plus and Open Source Vulnerability Allow Attackers to Execute Code Using MP4 file

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Tools (1)