Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/nginx@2:1.26.3-2.el10_1?arch=1
purl pkg:rpm/redhat/nginx@2:1.26.3-2.el10_1?arch=1
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 3.7
Vulnerabilities affecting this package (4)
Vulnerability Summary Fixed by
VCID-3czf-dtzg-8kdm
Aliases:
CVE-2026-27651
NULL pointer dereference while using CRAM-MD5 or APOP There are no reported fixed by versions.
VCID-fmvd-vyt7-mkfk
Aliases:
CVE-2026-27654
Buffer overflow in ngx_http_dav_module There are no reported fixed by versions.
VCID-sxf9-qr1j-u3et
Aliases:
CVE-2026-27784
Buffer overflow in the ngx_http_mp4_module There are no reported fixed by versions.
VCID-z3xb-4krg-rbae
Aliases:
CVE-2026-32647
Buffer overflow in the ngx_http_mp4_module There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-08T19:20:50.111705+00:00 RedHat Importer Affected by VCID-sxf9-qr1j-u3et https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-27784.json 38.1.0
2026-04-08T19:20:50.084431+00:00 RedHat Importer Affected by VCID-fmvd-vyt7-mkfk https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-27654.json 38.1.0
2026-04-08T19:20:50.052056+00:00 RedHat Importer Affected by VCID-3czf-dtzg-8kdm https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-27651.json 38.1.0
2026-04-08T19:20:50.021008+00:00 RedHat Importer Affected by VCID-z3xb-4krg-rbae https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-32647.json 38.1.0