CVE-2024-32760

Summary

CVE-2024-32760 is a newly discovered vulnerability affecting NGINX Plus and Open Source (NGINX OSS) when using the HTTP/3 QUIC module. The issue arises from undisclosed HTTP/3 encoder instructions that can lead NGINX worker processes to terminate or cause other potential impacts. This vulnerability poses a risk to websites and applications utilizing NGINX servers with the HTTP/3 QUIC module enabled. Further details, including exploit methods and potential mitigations, have not been disclosed at this time.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.