CVE-2026-65982
NULL-pointer dereference (DoS) in nginx-http-flv-module
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
nginx-http-flv-module is a media streaming server based on nginx-rtmp-module. Prior to version 1.2.14, if a server received an HTTP/1.0 request without a header Host, which was permitted by HTTP core of Nginx, then r->headers_in.host was NULL, nginx-http-flv-module used r->headers_in.host->value to make a pseudo tcUrl, so NULL-pointer dereference happened. This issue has been patched in version 1.2.14.
| CWE | CWE-476 |
| Vendor | winshining |
| Product | nginx-http-flv-module |
| Published | Nov 11, 2026 |
Stay Ahead of the Next One
Get instant alerts for winshining nginx-http-flv-module
Be the first to know when new unknown vulnerabilities affecting winshining nginx-http-flv-module are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
winshining / nginx-http-flv-module
< 1.2.14