nginx vulnerabilities
The newest vulnerabilities affecting nginx, up to 200. Subscribe by RSS.
- CVE-2026-104939NGINX Ingress Controller vulnerabilityF5 NGINX Ingress Controller
- CVE-2026-101019NGINX ngx_http_js_module vulnerabilityF5 NGINX JavaScript
- CVE-2026-101025NGINX ngx_http_js_module vulnerabilityF5 NGINX JavaScript
- CVE-2026-95101NGINX ngx_http_v3_module vulnerabilityF5 NGINX Plus · F5 NGINX Open Source
- CVE-2026-94197NGINX Ingress Controller vulnerabilityF5 NGINX Ingress Controller
- CVE-2026-96615NGINX Gateway Fabric vulnerabilityF5 NGINX Gateway Fabric
- CVE-2026-91184NGINX Gateway Fabric vulnerabilityF5 NGINX Gateway Fabric
- CVE-2026-97205NGINX ngx_http_core_module vulnerabilityF5 NGINX Plus · F5 NGINX Open Source
- CVE-2026-93479NGINX map directive and regex matching vulnerabilityF5 NGINX Plus · F5 NGINX Open Source
- CVE-2026-97629NGINX ngx_http_ssl_module vulnerabilityF5 NGINX Plus · F5 NGINX Open Source
- CVE-2026-15176NGINX ngx_http_core_module vulnerabilityF5 NGINX Plus · F5 NGINX Open Source
- CVE-2026-84312Nginx UI: Casdoor SSO callback uses a constant `state` parameter (login CSRF)0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-84360Nginx UI: OTP secure-session step-up can be bypassed via MCP configuration tools0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-84316Nginx UI: nginx config directive denylist (ValidateConfigFile) is bypassable via same-line ";" separation → authenticated directive injection (RCE on the official image)0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-84319Nginx UI: MCP configuration tools bypass restricted directive validation and allow secondary authenticated users to execute NJS in Nginx worker context0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-84317Nginx UI: MCP nginx_config_add skips config directive validation → authenticated nginx directive injection (RCE on the official image)0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-84313Nginx UI: TOTP / passkey enrolment requires no re-authentication, enabling persistent account takeover0xJacky nginx-ui · Nginx-UI +1
- CVE-2026-84321Nginx UI: Standalone short tokens survive administrative revocation in cache and authenticate again after account re-enable0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-84314Nginx UI: Account Takeover via Missing `RequireSecureSession` on User Management Endpoint0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-84320Nginx UI: Auto backup name allows path traversal outside validated storage path0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-84318Nginx UI: MCP `nginx_config_add` Bypasses Directive Validation — Authenticated RCE0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-84315Nginx UI OTP secure-session step-up is missing on sensitive mutation routes0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-107813Nginx UI: Incomplete fix of CVE-2026-84315 - the api/cluster router was not - wrapped in RequireSecureSession, so those sensitive mutations run without OTP step-up0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-107812Nginx UI: Self-upgrade runs an unsigned binary verified only by a same-origin digest → RCE via a compromised mirror or MITM0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-1078110xJacky/nginx-ui /api/nodes Leaks Cluster Node Tokens and Allows Cross-Node Impersonation as initUser0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-107810Nginx UI: Backup restore follows crafted symlinks into the live Nginx configuration path before restore flags are applied0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-107809Nginx-UI AuthRequired token cookie fallback enables CSRF against management APIs0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-107808Nginx UI: Authentication bypass: password login does not enforce a passkey-only second factor (2FA bypass)0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-107807Nginx UI: Node Secret Credential Exposure via URL Query Parameter0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-107806Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config Overwrite0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-107805Nginx UI: Unauthenticated signed-request body staging can exhaust temporary storage0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-107804Nginx UI: Bundled reverse proxy can bypass IP allowlists and enable shared login lockout0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-102335Nginx Proxy Manager through 2.16.0 Improper Authorization via advanced_configNginxProxyManager nginx-proxy-manager
- CVE-2026-102334Nginx Proxy Manager through 2.16.0 Missing Brute-Force ProtectionNginxProxyManager nginx-proxy-manager
- CVE-2026-61628nginx ignition has Unauthenticated Admin Account Creation via Onboarding Race Conditionlucasdillmann nginx-ignition · github.com/lucasdillmann/ngi…
- CVE-2026-61629nginx ignition has ParseAcceptLanguage `_` separator bypass that enables ~75x CPU amplification via Accept-Language header in i18nMiddlewarelucasdillmann nginx-ignition · github.com/lucasdillmann/ngi…
- CVE-2026-61630nginx ignition has TOTP Reuse During Validity Windowlucasdillmann nginx-ignition · github.com/lucasdillmann/ngi…
- CVE-2026-93964NginxProxyManager nginx-proxy-manager Validate Route certificate.js internalCertificate.validate missing authenticationNginxProxyManager nginx-proxy-manager
- CVE-2026-90439NGINX ngx_http_v3_module vulnerabilityF5 NGINX Plus · F5 NGINX Open Source
- CVE-2026-78222NGINX ngx_http_js_module vulnerabilityF5 NGINX JavaScript
- CVE-2026-78689NGINX ngx_http_js_module vulnerablilityF5 NGINX JavaScript
- CVE-2026-77180NGINX Ingress Controller vulnerabilityF5 NGINX Ingress Controller
- CVE-2026-66362NGF vulnerabilityF5 NGINX Gateway Fabric
- CVE-2026-18329NGINX ngx_http_js_module vulnerabilityF5 NGINX JavaScript
- CVE-2026-60005NGINX ngx_http_slice_module vulnerabilityF5 NGINX Plus · F5 NGINX Open Source
- CVE-2026-60065NGINX Plus ngx_stream_mqtt_filter_module vulnerabilityF5 NGINX Plus
- CVE-2026-56434NGINX ngx_http_ssi_module vulnerabilityF5 NGINX Plus · F5 NGINX Open Source
- CVE-2026-42533NGINX Map directive and Regex matching vulnerabilityF5 NGINX Plus · F5 NGINX Open Source
- CVE-2026-60062NGINX Agent VulnerabilityF5 NGINX Agent · F5 NGINX Instance Manager
- CVE-2026-52865NGINX Ingress Controller vulnerabilityF5 NGINX Ingress Controller
- CVE-2026-55723NGINX Ingress Controller vulnerabilityF5 NGINX Ingress Controller
- CVE-2026-32682NGINX Gateway Fabric vulnerabilityF5 NGINX Gateway Fabric
- CVE-2026-50107NGINX Gateway Fabric vulnerabilityF5 NGINX Gateway Fabric
- CVE-2026-11311NGINX Gateway Fabric vulnerabilityF5 NGINX Gateway Fabric
- CVE-2026-48142NGINX ngx_http_charset_module vulnerabilityF5 NGINX Open Source · F5 NGINX Plus
- CVE-2026-42055NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerabilityF5 NGINX Open Source · F5 NGINX Plus
- CVE-2026-42530NGINX Open-Source ngx_http_v3_module vulnerabilityF5 NGINX Open Source
- CVE-2026-40519Nginx Proxy Manager Authenticated RCE via setupCertbotPlugins()NginxProxyManager nginx-proxy-manager
- CVE-2026-9256NGINX ngx_http_rewrite_module vulnerabilityF5 NGINX Plus · F5 NGINX Open Source
- CVE-2026-8711NGINX JavaScript vulnerabilityF5 NGINX JavaScript
- CVE-2026-42926NGINX ngx_http_proxy_v2_module vulnerabilityF5 NGINX Open Source
- CVE-2026-40460NGINX ngx_quic_module vulnerabilityF5 NGINX Plus · F5 NGINX Open Source
- CVE-2026-42946NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerabilityF5 NGINX Plus · F5 NGINX Open Source
- CVE-2026-42934NGINX ngx_http_charset_module vulnerabilityF5 NGINX Plus · F5 NGINX Open Source
- CVE-2026-42945NGINX ngx_http_rewrite_module vulnerabilityF5 NGINX Plus · F5 NGINX Open Source
- CVE-2026-40701NGINX ngx_http_ssl_module vulnerabilityF5 NGINX Plus · F5 NGINX Open Source
- CVE-2026-44015Nginx UI: Server-Side Request Forgery (SSRF) via Cluster Proxy Middleware Allows Access to Internal Services0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-42238Unauthenticated Remote Code Execution via Backup Restore in nginx-ui0xJacky nginx-ui · github.com/0xJacky/nginx-ui
- CVE-2026-42223nginx-ui: Settings API Exposes Protected Secrets0xJacky nginx-ui · github.com/0xJacky/nginx-ui
- CVE-2026-42222nginx-ui: Unauthenticated first-boot instance claim via POST /api/install allows remote bootstrap takeover0xJacky nginx-ui · github.com/0xJacky/nginx-ui
- CVE-2026-42221nginx-ui: Unauthenticated First-Run Installer Allows Remote Initial Admin Claim0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-42220nginx-ui: Authenticated settings disclosure exposes node.secret and enables trusted-node authentication abuse, backup exfiltration, and restore-based nginx-ui state rollback0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-34403Nginx-UI vulnerable to Cross-Site WebSocket Hijacking (CSWSH) via missing origin validation on all WebSocket endpoints0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-33031Nginx-UI: Disabled users retain full API access through previously issued bearer tokens0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-33026nginx-ui Backup Restore Allows Tampering with Encrypted Backups0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-33027Nginx UI: Improper Path Validation Allows Recursive Deletion of the Nginx Configuration Directory0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-33028Nginx UI: Race Condition Leads to Persistent Data Corruption and Service Collapse0xJacky nginx-ui · github.com/0xJacky/Nginx-UI +1
- CVE-2026-33029Nginx UI: DoS via Negative Integer Input in Logrotate Interval0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-33030Nginx UI: Unencrypted Storage of DNS API Tokens and ACME Private Keys0xJacky nginx-ui · github.com/0xJacky/nginx-ui
- CVE-2026-33032Nginx UI: Unauthenticated MCP Endpoint Allows Remote Nginx Takeover0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-27651NGINX ngx_mail_auth_http_module vulnerabilityF5 NGINX Open Source · F5 NGINX Plus
- CVE-2026-27654NGINX ngx_http_dav_module vulnerabilityF5 NGINX Open Source · F5 NGINX Plus
- CVE-2026-28755NGINX ngx_stream_ssl_module vulnerabilityF5 NGINX Open Source · F5 NGINX Plus
- CVE-2026-28753NGINX ngx_mail_proxy_module vulnerabilityF5 NGINX Open Source · F5 NGINX Plus
- CVE-2026-32647NGINX ngx_http_mp4_module vulnerabilityF5 NGINX Open Source · F5 NGINX Plus
- CVE-2026-27784NGINX ngx_http_mp4_module vulnerabilityF5 NGINX Open Source
- CVE-2026-27944Nginx UI: Unauthenticated Backup Download with Encryption Key Disclosure0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2026-1642NGINX vulnerabilityF5 NGINX Open Source · F5 NGINX Plus
- CVE-2025-14727NGINX Ingress Controller vulnerabilityF5 NGINX Ingress Controller
- CVE-2025-12014NGINX Cache Optimizer <= 1.1 - Missing Authorization to Authenticated (Subscriber+) Dynamic Caching Exclusion Updategetclouder NGINX Cache Optimizer
- CVE-2025-58474BIG-IP Advanced WAF and ASM and NGINX App Protect DNS lookup vulnerabilityF5 BIG-IP · F5 NGINX App Protect WAF
- CVE-2025-55740Default Credentials in nginx-defender Configuration FilesAnipaleja nginx-defender · github.com/Anipaleja/nginx-defen…
- CVE-2025-53859NGINX ngx_mail_smtp_module vulnerabilityF5 NGINX Plus · F5 NGINX Open Source
- CVE-2025-6213Nginx Cache Purge Preload <= 2.1.1 - Authenticated (Administrator+) Remote Code Executionpsauxit Nginx Cache Purge Preload
- CVE-2025-1695NGINX Unit Java VulnerabilityF5 NGINX Unit
- CVE-2025-23419TLS Session Resumption VulnerabilityF5 NGINX Open Source · F5 NGINX Plus
- CVE-2024-10318NGINX OpenID Connect VulnerabilityF5 NGINX OpenID Connect · F5 NGINX Instance Manager +2
- CVE-2024-49368Unchecked logrotate settings lead to arbitrary command execution0xJacky nginx-ui
- CVE-2024-49367Nginx UI's log path can be controlled0xJacky nginx-ui
- CVE-2024-49366Nginx UI's json field can construct a directory traversal payload, causing arbitrary files to be written0xJacky nginx-ui
- CVE-2024-7634NGINX Agent VulnerabilityF5 NGINX Agent
- CVE-2024-7347NGINX MP4 module vulnerabilityF5 NGINX Open Source · F5 NGINX Plus
- CVE-2024-39792NGINX Plus MQTT vulnerabilityF5 NGINX Plus
- CVE-2024-34161NGINX HTTP/3 QUIC vulnerabilityF5 NGINX Open Source · F5 NGINX Plus
- CVE-2024-35200NGINX HTTP/3 QUIC vulnerabilityF5 NGINX Open Source · F5 NGINX Plus
- CVE-2024-32760NGINX HTTP/3 QUIC vulnerabilityF5 NGINX Open Source · F5 NGINX Plus
- CVE-2024-31079NGINX HTTP/3 QUIC vulnerabilityF5 NGINX Open Source · F5 NGINX Plus
- CVE-2024-24990NGINX HTTP/3 QUIC vulnerabilityF5 NGINX Plus · F5 NGINX Open Source
- CVE-2024-24989NGINX HTTP/3 QUIC vulnerabilityF5 NGINX Plus · F5 NGINX Open Source
- CVE-2024-23828Nginx-UI authenticated RCE through injecting into the application config via CRLF0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2024-23827Nginx-UI arbitrary file write through the Import Certificate feature0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2024-22198Authenticated (user role) arbitrary command execution by modifying `start_cmd` setting (GHSL-2023-268)0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2024-22196Authenticated (user role) SQL injection in `OrderAndPaginate` (GHSL-2023-270)0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2024-22197Authenticated (user role) remote command execution by modifying `nginx` settings (GHSL-2023-269)0xJacky nginx-ui · github.com/0xJacky/Nginx-UI
- CVE-2023-28724NGINX Management Suite vulnerabilityF5 NGINX Instance Manager · F5 NGINX API Connectivity Ma… +1
- CVE-2023-28656NGINX Management Suite vulnerabilityF5 NGINX Instance Manager · F5 NGINX API Connectivity Ma… +1
- CVE-2023-1550NGINX Agent vulnerability CVE-2023-1550F5 NGINX Agent
- CVE-2022-41743NGINX ngx_http_hls_module vulnerability CVE-2022-41743F5 NGINX Plus
- CVE-2022-41742NGINX ngx_http_mp4_module vulnerability CVE-2022-41742F5 NGINX
- CVE-2022-41741NGINX ngx_http_mp4_module vulnerability CVE-2022-41741F5 NGINX
- CVE-2022-35241NGINX Instance Manager vulnerability CVE-2022-35241F5 NGINX Instance Manager
- CVE-2022-30535NGINX Ingress Controller vulnerability CVE-2022-30535F5 NGINX Ingress Controller
- CVE-2022-27495On all versions 1.3.x (fixed in 1.4.0) NGINX Service Mesh control plane endpoints are exposed to the cluster overlay network.F5 NGINX Service Mesh
- CVE-2021-23055On version 2.x before 2.0.3 and 1.x before 1.12.3, the command line restriction that controls snippet use with NGINX Ingress Controller doesNGINX Ingress Controller
- CVE-2022-23008On NGINX Controller API Management versions 3.18.0-3.19.0, an authenticated attacker with access to the "user" or "admin" role can use undisNGINX Controller API Management
- CVE-2021-23017A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cauNginx Web Server, Nginx Plus
- CVE-2021-23021The Nginx Controller 3.x before 3.7.0 agent configuration file /etc/controller-agent/agent.conf is world readable with current permission biNginx Controller
- CVE-2021-23020The NAAS 3.x before 3.10.0 API keys were generated using an insecure pseudo-random string and hashing algorithm which could lead to predictaNginx Controller
- CVE-2021-23019The NGINX Controller 2.0.0 thru 2.9.0 and 3.x before 3.15.0 Administrator password may be exposed in the systemd.txt file that is included iNginx Controller
- CVE-2021-23018Intra-cluster communication does not use TLS.Nginx Controller
- CVE-2020-27730In versions 3.0.0-3.9.0, 2.0.0-2.9.0, and 1.0.1, the NGINX Controller Agent does not use absolute paths when calling system utilities.NGINX Controller
- CVE-2020-5909In versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, when users run the command displayed in NGINX Controller user interface (UI) to fetch the aNGINX Controller
- CVE-2020-5910In versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, the Neural Autonomic Transport System (NATS) messaging services in use by the NGINX ControlNGINX Controller
- CVE-2020-5911In versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, the NGINX Controller installer starts the download of Kubernetes packages from an HTTP URL NGINX Controller
- CVE-2020-5901In NGINX Controller 3.3.0-3.4.0, undisclosed API endpoints may allow for a reflected Cross Site Scripting (XSS) attack.NGINX Controller
- CVE-2020-5899In NGINX Controller 3.0.0-3.4.0, recovery code required to change a user's password is transmitted and stored in the database in plain text,NGINX Controller
- CVE-2020-5900In versions 3.0.0-3.4.0, 2.0.0-2.9.0, and 1.0.1, there is insufficient cross-site request forgery (CSRF) protections for the NGINX ControlleNGINX Controller
- CVE-2020-5895On NGINX Controller versions 3.1.0-3.3.0, AVRD uses world-readable and world-writable permissions on its socket, which allows processes or uNGINX Controller
- CVE-2020-5894On versions 3.0.0-3.3.0, the NGINX Controller webserver does not invalidate the server-side session token after users log out.NGINX Controller
- CVE-2020-5867In versions prior to 3.3.0, the NGINX Controller Agent installer script 'install.sh' uses HTTP instead of HTTPS to check and install packageNGINX Controller
- CVE-2020-5866In versions of NGINX Controller prior to 3.3.0, the helper.sh script, which is used optionally in NGINX Controller to change settings, uses NGINX Controller
- CVE-2020-5864In versions of NGINX Controller prior to 3.2.0, communication between NGINX Controller and NGINX Plus instances skip TLS verification by defNGINX Controller
- CVE-2020-5865In versions prior to 3.3.0, the NGINX Controller is configured to communicate with its Postgres database server over unencrypted channels, mNGINX Controller
- CVE-2020-5863In NGINX Controller versions prior to 3.2.0, an unauthenticated attacker with network access to the Controller API can create unprivileged uNGINX Controller
- CVE-2011-4968nginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack (MITM)nginx
- CVE-2018-16843nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive memory consumption.[UNKNOWN] nginx
- CVE-2018-16844nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive CPU usage.[UNKNOWN] nginx
- CVE-2018-16845nginx before versions 1.15.6, 1.14.1 has a vulnerability in the ngx_http_mp4_module, which might allow an attacker to cause infinite loop in[UNKNOWN] nginx
- CVE-2017-7529Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resultinnginx