# cve.now: nginx

The newest entries affecting nginx (up to 200). Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-104939](https://cve.now/CVE-2026-104939.md): NGINX Ingress Controller vulnerability (CVSS 7.5, F5 NGINX Ingress Controller)
- [CVE-2026-101019](https://cve.now/CVE-2026-101019.md): NGINX ngx\_http\_js\_module vulnerability (CVSS 6.5, F5 NGINX JavaScript)
- [CVE-2026-101025](https://cve.now/CVE-2026-101025.md): NGINX ngx\_http\_js\_module vulnerability (CVSS 5.3, F5 NGINX JavaScript)
- [CVE-2026-95101](https://cve.now/CVE-2026-95101.md): NGINX ngx\_http\_v3\_module vulnerability (CVSS 5.3, F5 NGINX Plus · F5 NGINX Open Source)
- [CVE-2026-94197](https://cve.now/CVE-2026-94197.md): NGINX Ingress Controller vulnerability (CVSS 7.5, F5 NGINX Ingress Controller)
- [CVE-2026-96615](https://cve.now/CVE-2026-96615.md): NGINX Gateway Fabric vulnerability (CVSS 6.5, F5 NGINX Gateway Fabric)
- [CVE-2026-91184](https://cve.now/CVE-2026-91184.md): NGINX Gateway Fabric vulnerability (CVSS 8.8, F5 NGINX Gateway Fabric)
- [CVE-2026-97205](https://cve.now/CVE-2026-97205.md): NGINX ngx\_http\_core\_module vulnerability (CVSS 8.1, F5 NGINX Plus · F5 NGINX Open Source)
- [CVE-2026-93479](https://cve.now/CVE-2026-93479.md): NGINX map directive and regex matching vulnerability (CVSS 8.1, F5 NGINX Plus · F5 NGINX Open Source)
- [CVE-2026-97629](https://cve.now/CVE-2026-97629.md): NGINX ngx\_http\_ssl\_module vulnerability (CVSS 6.5, F5 NGINX Plus · F5 NGINX Open Source)
- [CVE-2026-15176](https://cve.now/CVE-2026-15176.md): NGINX ngx\_http\_core\_module vulnerability (CVSS 8.1, F5 NGINX Plus · F5 NGINX Open Source)
- [CVE-2026-84312](https://cve.now/CVE-2026-84312.md): Nginx UI: Casdoor SSO callback uses a constant \`state\` parameter (login CSRF) (CVSS 7.1, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-84360](https://cve.now/CVE-2026-84360.md): Nginx UI: OTP secure-session step-up can be bypassed via MCP configuration tools (CVSS 8.1, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-84316](https://cve.now/CVE-2026-84316.md): Nginx UI: nginx config directive denylist (ValidateConfigFile) is bypassable via same-line ";" separation → authenticated directive injection (RCE on the official image) (CVSS 8.8, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-84319](https://cve.now/CVE-2026-84319.md): Nginx UI: MCP configuration tools bypass restricted directive validation and allow secondary authenticated users to execute NJS in Nginx worker context (CVSS 8.3, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-84317](https://cve.now/CVE-2026-84317.md): Nginx UI: MCP nginx\_config\_add skips config directive validation → authenticated nginx directive injection (RCE on the official image) (CVSS 8.8, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-84313](https://cve.now/CVE-2026-84313.md): Nginx UI: TOTP / passkey enrolment requires no re-authentication, enabling persistent account takeover (CVSS 8.8, 0xJacky nginx-ui · Nginx-UI +1)
- [CVE-2026-84321](https://cve.now/CVE-2026-84321.md): Nginx UI: Standalone short tokens survive administrative revocation in cache and authenticate again after account re-enable (CVSS 5.4, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-84314](https://cve.now/CVE-2026-84314.md): Nginx UI: Account Takeover via Missing \`RequireSecureSession\` on User Management Endpoint (CVSS 8.7, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-84320](https://cve.now/CVE-2026-84320.md): Nginx UI: Auto backup name allows path traversal outside validated storage path (CVSS 6.3, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-84318](https://cve.now/CVE-2026-84318.md): Nginx UI: MCP \`nginx\_config\_add\` Bypasses Directive Validation — Authenticated RCE (CVSS 8.8, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-84315](https://cve.now/CVE-2026-84315.md): Nginx UI OTP secure-session step-up is missing on sensitive mutation routes (CVSS 8.3, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-107813](https://cve.now/CVE-2026-107813.md): Nginx UI: Incomplete fix of CVE-2026-84315 - the api/cluster router was not - wrapped in RequireSecureSession, so those sensitive mutations run without OTP step-up (CVSS 8.8, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-107812](https://cve.now/CVE-2026-107812.md): Nginx UI: Self-upgrade runs an unsigned binary verified only by a same-origin digest → RCE via a compromised mirror or MITM (CVSS 7.5, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-107811](https://cve.now/CVE-2026-107811.md): 0xJacky/nginx-ui /api/nodes Leaks Cluster Node Tokens and Allows Cross-Node Impersonation as initUser (CVSS 8.8, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-107810](https://cve.now/CVE-2026-107810.md): Nginx UI: Backup restore follows crafted symlinks into the live Nginx configuration path before restore flags are applied (CVSS 8.1, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-107809](https://cve.now/CVE-2026-107809.md): Nginx-UI AuthRequired token cookie fallback enables CSRF against management APIs (CVSS 8.8, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-107808](https://cve.now/CVE-2026-107808.md): Nginx UI: Authentication bypass: password login does not enforce a passkey-only second factor (2FA bypass) (CVSS 8.1, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-107807](https://cve.now/CVE-2026-107807.md): Nginx UI: Node Secret Credential Exposure via URL Query Parameter (CVSS 8.8, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-107806](https://cve.now/CVE-2026-107806.md): Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config Overwrite (CVSS 9.4, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-107805](https://cve.now/CVE-2026-107805.md): Nginx UI: Unauthenticated signed-request body staging can exhaust temporary storage (CVSS 7.5, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-107804](https://cve.now/CVE-2026-107804.md): Nginx UI: Bundled reverse proxy can bypass IP allowlists and enable shared login lockout (CVSS 5.3, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-102335](https://cve.now/CVE-2026-102335.md): Nginx Proxy Manager through 2.16.0 Improper Authorization via advanced\_config (CVSS 7.1, NginxProxyManager nginx-proxy-manager)
- [CVE-2026-102334](https://cve.now/CVE-2026-102334.md): Nginx Proxy Manager through 2.16.0 Missing Brute-Force Protection (CVSS 9.1, NginxProxyManager nginx-proxy-manager)
- [CVE-2026-61628](https://cve.now/CVE-2026-61628.md): nginx ignition has Unauthenticated Admin Account Creation via Onboarding Race Condition (CVSS 8.1, lucasdillmann nginx-ignition · github.com/lucasdillmann/ngi…)
- [CVE-2026-61629](https://cve.now/CVE-2026-61629.md): nginx ignition has ParseAcceptLanguage \`\_\` separator bypass that enables ~75x CPU amplification via Accept-Language header in i18nMiddleware (CVSS 7.5, lucasdillmann nginx-ignition · github.com/lucasdillmann/ngi…)
- [CVE-2026-61630](https://cve.now/CVE-2026-61630.md): nginx ignition has TOTP Reuse During Validity Window (CVSS 4.2, lucasdillmann nginx-ignition · github.com/lucasdillmann/ngi…)
- [CVE-2026-93964](https://cve.now/CVE-2026-93964.md): NginxProxyManager nginx-proxy-manager Validate Route certificate.js internalCertificate.validate missing authentication (CVSS 6.9, NginxProxyManager nginx-proxy-manager)
- [CVE-2026-90439](https://cve.now/CVE-2026-90439.md): NGINX ngx\_http\_v3\_module vulnerability (CVSS 6.5, F5 NGINX Plus · F5 NGINX Open Source)
- [CVE-2026-78222](https://cve.now/CVE-2026-78222.md): NGINX ngx\_http\_js\_module vulnerability (CVSS 7.5, F5 NGINX JavaScript)
- [CVE-2026-78689](https://cve.now/CVE-2026-78689.md): NGINX ngx\_http\_js\_module vulnerablility (CVSS 8.1, F5 NGINX JavaScript)
- [CVE-2026-77180](https://cve.now/CVE-2026-77180.md): NGINX Ingress Controller vulnerability (CVSS 8.3, F5 NGINX Ingress Controller)
- [CVE-2026-66362](https://cve.now/CVE-2026-66362.md): NGF vulnerability (CVSS 8.1, F5 NGINX Gateway Fabric)
- [CVE-2026-18329](https://cve.now/CVE-2026-18329.md): NGINX ngx\_http\_js\_module vulnerability (CVSS 8.2, F5 NGINX JavaScript)
- [CVE-2026-60005](https://cve.now/CVE-2026-60005.md): NGINX ngx\_http\_slice\_module vulnerability (CVSS 8.2, F5 NGINX Plus · F5 NGINX Open Source)
- [CVE-2026-60065](https://cve.now/CVE-2026-60065.md): NGINX Plus ngx\_stream\_mqtt\_filter\_module vulnerability (CVSS 3.7, F5 NGINX Plus)
- [CVE-2026-56434](https://cve.now/CVE-2026-56434.md): NGINX ngx\_http\_ssi\_module vulnerability (CVSS 6.5, F5 NGINX Plus · F5 NGINX Open Source)
- [CVE-2026-42533](https://cve.now/CVE-2026-42533.md): NGINX Map directive and Regex matching vulnerability (CVSS 8.1, F5 NGINX Plus · F5 NGINX Open Source)
- [CVE-2026-60062](https://cve.now/CVE-2026-60062.md): NGINX Agent Vulnerability (CVSS 6.4, F5 NGINX Agent · F5 NGINX Instance Manager)
- [CVE-2026-52865](https://cve.now/CVE-2026-52865.md): NGINX Ingress Controller vulnerability (CVSS 6.5, F5 NGINX Ingress Controller)
- [CVE-2026-55723](https://cve.now/CVE-2026-55723.md): NGINX Ingress Controller vulnerability (CVSS 8.3, F5 NGINX Ingress Controller)
- [CVE-2026-32682](https://cve.now/CVE-2026-32682.md): NGINX Gateway Fabric vulnerability (CVSS 6.5, F5 NGINX Gateway Fabric)
- [CVE-2026-50107](https://cve.now/CVE-2026-50107.md): NGINX Gateway Fabric vulnerability (CVSS 8.1, F5 NGINX Gateway Fabric)
- [CVE-2026-11311](https://cve.now/CVE-2026-11311.md): NGINX Gateway Fabric vulnerability (CVSS 8.1, F5 NGINX Gateway Fabric)
- [CVE-2026-48142](https://cve.now/CVE-2026-48142.md): NGINX ngx\_http\_charset\_module vulnerability (CVSS 4.8, F5 NGINX Open Source · F5 NGINX Plus)
- [CVE-2026-42055](https://cve.now/CVE-2026-42055.md): NGINX ngx\_http\_proxy\_v2\_module and ngx\_http\_grpc\_module vulnerability (CVSS 8.1, F5 NGINX Open Source · F5 NGINX Plus)
- [CVE-2026-42530](https://cve.now/CVE-2026-42530.md): NGINX Open-Source ngx\_http\_v3\_module vulnerability (CVSS 8.1, F5 NGINX Open Source)
- [CVE-2026-40519](https://cve.now/CVE-2026-40519.md): Nginx Proxy Manager Authenticated RCE via setupCertbotPlugins() (CVSS 7.7, NginxProxyManager nginx-proxy-manager)
- [CVE-2026-9256](https://cve.now/CVE-2026-9256.md): NGINX ngx\_http\_rewrite\_module vulnerability (CVSS 8.1, F5 NGINX Plus · F5 NGINX Open Source)
- [CVE-2026-8711](https://cve.now/CVE-2026-8711.md): NGINX JavaScript vulnerability (CVSS 8.1, F5 NGINX JavaScript)
- [CVE-2026-42926](https://cve.now/CVE-2026-42926.md): NGINX ngx\_http\_proxy\_v2\_module vulnerability (CVSS 5.8, F5 NGINX Open Source)
- [CVE-2026-40460](https://cve.now/CVE-2026-40460.md): NGINX ngx\_quic\_module vulnerability (CVSS 6.5, F5 NGINX Plus · F5 NGINX Open Source)
- [CVE-2026-42946](https://cve.now/CVE-2026-42946.md): NGINX ngx\_http\_scgi\_module and ngx\_http\_uwsgi\_module vulnerability (CVSS 6.5, F5 NGINX Plus · F5 NGINX Open Source)
- [CVE-2026-42934](https://cve.now/CVE-2026-42934.md): NGINX ngx\_http\_charset\_module vulnerability (CVSS 4.8, F5 NGINX Plus · F5 NGINX Open Source)
- [CVE-2026-42945](https://cve.now/CVE-2026-42945.md): NGINX ngx\_http\_rewrite\_module vulnerability (CVSS 8.1, F5 NGINX Plus · F5 NGINX Open Source)
- [CVE-2026-40701](https://cve.now/CVE-2026-40701.md): NGINX ngx\_http\_ssl\_module vulnerability (CVSS 4.8, F5 NGINX Plus · F5 NGINX Open Source)
- [CVE-2026-44015](https://cve.now/CVE-2026-44015.md): Nginx UI: Server-Side Request Forgery (SSRF) via Cluster Proxy Middleware Allows Access to Internal Services (CVSS 8.5, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-42238](https://cve.now/CVE-2026-42238.md): Unauthenticated Remote Code Execution via Backup Restore in nginx-ui (CVSS 9.0, 0xJacky nginx-ui · github.com/0xJacky/nginx-ui)
- [CVE-2026-42223](https://cve.now/CVE-2026-42223.md): nginx-ui: Settings API Exposes Protected Secrets (CVSS 6.5, 0xJacky nginx-ui · github.com/0xJacky/nginx-ui)
- [CVE-2026-42222](https://cve.now/CVE-2026-42222.md): nginx-ui: Unauthenticated first-boot instance claim via POST /api/install allows remote bootstrap takeover (CVSS 8.1, 0xJacky nginx-ui · github.com/0xJacky/nginx-ui)
- [CVE-2026-42221](https://cve.now/CVE-2026-42221.md): nginx-ui: Unauthenticated First-Run Installer Allows Remote Initial Admin Claim (CVSS 8.1, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-42220](https://cve.now/CVE-2026-42220.md): nginx-ui: Authenticated settings disclosure exposes node.secret and enables trusted-node authentication abuse, backup exfiltration, and restore-based nginx-ui state rollback (CVSS 6.5, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-34403](https://cve.now/CVE-2026-34403.md): Nginx-UI vulnerable to Cross-Site WebSocket Hijacking (CSWSH) via missing origin validation on all WebSocket endpoints (CVSS 5.5, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-33031](https://cve.now/CVE-2026-33031.md): Nginx-UI: Disabled users retain full API access through previously issued bearer tokens (CVSS 8.6, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-33026](https://cve.now/CVE-2026-33026.md): nginx-ui Backup Restore Allows Tampering with Encrypted Backups (CVSS 9.4, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-33027](https://cve.now/CVE-2026-33027.md): Nginx UI: Improper Path Validation Allows Recursive Deletion of the Nginx Configuration Directory (CVSS 6.9, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-33028](https://cve.now/CVE-2026-33028.md): Nginx UI: Race Condition Leads to Persistent Data Corruption and Service Collapse (CVSS 7.1, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI +1)
- [CVE-2026-33029](https://cve.now/CVE-2026-33029.md): Nginx UI: DoS via Negative Integer Input in Logrotate Interval (CVSS 6.9, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-33030](https://cve.now/CVE-2026-33030.md): Nginx UI: Unencrypted Storage of DNS API Tokens and ACME Private Keys (CVSS 8.8, 0xJacky nginx-ui · github.com/0xJacky/nginx-ui)
- [CVE-2026-33032](https://cve.now/CVE-2026-33032.md): Nginx UI: Unauthenticated MCP Endpoint Allows Remote Nginx Takeover (CVSS 9.8, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-27651](https://cve.now/CVE-2026-27651.md): NGINX ngx\_mail\_auth\_http\_module vulnerability (CVSS 7.5, F5 NGINX Open Source · F5 NGINX Plus)
- [CVE-2026-27654](https://cve.now/CVE-2026-27654.md): NGINX ngx\_http\_dav\_module vulnerability (CVSS 8.2, F5 NGINX Open Source · F5 NGINX Plus)
- [CVE-2026-28755](https://cve.now/CVE-2026-28755.md): NGINX ngx\_stream\_ssl\_module vulnerability (CVSS 5.4, F5 NGINX Open Source · F5 NGINX Plus)
- [CVE-2026-28753](https://cve.now/CVE-2026-28753.md): NGINX ngx\_mail\_proxy\_module vulnerability (CVSS 3.7, F5 NGINX Open Source · F5 NGINX Plus)
- [CVE-2026-32647](https://cve.now/CVE-2026-32647.md): NGINX ngx\_http\_mp4\_module vulnerability (CVSS 7.8, F5 NGINX Open Source · F5 NGINX Plus)
- [CVE-2026-27784](https://cve.now/CVE-2026-27784.md): NGINX ngx\_http\_mp4\_module vulnerability (CVSS 7.8, F5 NGINX Open Source)
- [CVE-2026-27944](https://cve.now/CVE-2026-27944.md): Nginx UI: Unauthenticated Backup Download with Encryption Key Disclosure (CVSS 9.8, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2026-1642](https://cve.now/CVE-2026-1642.md): NGINX vulnerability (CVSS 5.9, F5 NGINX Open Source · F5 NGINX Plus)
- [CVE-2025-14727](https://cve.now/CVE-2025-14727.md): NGINX Ingress Controller vulnerability (CVSS 8.3, F5 NGINX Ingress Controller)
- [CVE-2025-12014](https://cve.now/CVE-2025-12014.md): NGINX Cache Optimizer \<= 1.1 - Missing Authorization to Authenticated (Subscriber+) Dynamic Caching Exclusion Update (CVSS 4.3, getclouder NGINX Cache Optimizer)
- [CVE-2025-58474](https://cve.now/CVE-2025-58474.md): BIG-IP Advanced WAF and ASM and NGINX App Protect DNS lookup vulnerability (CVSS 5.3, F5 BIG-IP · F5 NGINX App Protect WAF)
- [CVE-2025-55740](https://cve.now/CVE-2025-55740.md): Default Credentials in nginx-defender Configuration Files (CVSS 6.5, Anipaleja nginx-defender · github.com/Anipaleja/nginx-defen…)
- [CVE-2025-53859](https://cve.now/CVE-2025-53859.md): NGINX ngx\_mail\_smtp\_module vulnerability (CVSS 3.7, F5 NGINX Plus · F5 NGINX Open Source)
- [CVE-2025-6213](https://cve.now/CVE-2025-6213.md): Nginx Cache Purge Preload \<= 2.1.1 - Authenticated (Administrator+) Remote Code Execution (CVSS 7.2, psauxit Nginx Cache Purge Preload)
- [CVE-2025-1695](https://cve.now/CVE-2025-1695.md): NGINX Unit Java Vulnerability (CVSS 5.3, F5 NGINX Unit)
- [CVE-2025-23419](https://cve.now/CVE-2025-23419.md): TLS Session Resumption Vulnerability (CVSS 4.3, F5 NGINX Open Source · F5 NGINX Plus)
- [CVE-2024-10318](https://cve.now/CVE-2024-10318.md): NGINX OpenID Connect Vulnerability (CVSS 5.4, F5 NGINX OpenID Connect · F5 NGINX Instance Manager +2)
- [CVE-2024-49368](https://cve.now/CVE-2024-49368.md): Unchecked logrotate settings lead to arbitrary command execution (CVSS 8.9, 0xJacky nginx-ui)
- [CVE-2024-49367](https://cve.now/CVE-2024-49367.md): Nginx UI's log path can be controlled (CVSS 5.5, 0xJacky nginx-ui)
- [CVE-2024-49366](https://cve.now/CVE-2024-49366.md): Nginx UI's json field can construct a directory traversal payload, causing arbitrary files to be written (CVSS 7.7, 0xJacky nginx-ui)
- [CVE-2024-7634](https://cve.now/CVE-2024-7634.md): NGINX Agent Vulnerability (CVSS 4.9, F5 NGINX Agent)
- [CVE-2024-7347](https://cve.now/CVE-2024-7347.md): NGINX MP4 module vulnerability (CVSS 4.7, F5 NGINX Open Source · F5 NGINX Plus)
- [CVE-2024-39792](https://cve.now/CVE-2024-39792.md): NGINX Plus MQTT vulnerability (CVSS 7.5, F5 NGINX Plus)
- [CVE-2024-34161](https://cve.now/CVE-2024-34161.md): NGINX HTTP/3 QUIC vulnerability (CVSS 5.3, F5 NGINX Open Source · F5 NGINX Plus)
- [CVE-2024-35200](https://cve.now/CVE-2024-35200.md): NGINX HTTP/3 QUIC vulnerability (CVSS 5.3, F5 NGINX Open Source · F5 NGINX Plus)
- [CVE-2024-32760](https://cve.now/CVE-2024-32760.md): NGINX HTTP/3 QUIC vulnerability (CVSS 6.5, F5 NGINX Open Source · F5 NGINX Plus)
- [CVE-2024-31079](https://cve.now/CVE-2024-31079.md): NGINX HTTP/3 QUIC vulnerability (CVSS 4.8, F5 NGINX Open Source · F5 NGINX Plus)
- [CVE-2024-24990](https://cve.now/CVE-2024-24990.md): NGINX HTTP/3 QUIC vulnerability (CVSS 7.5, F5 NGINX Plus · F5 NGINX Open Source)
- [CVE-2024-24989](https://cve.now/CVE-2024-24989.md): NGINX HTTP/3 QUIC vulnerability (CVSS 7.5, F5 NGINX Plus · F5 NGINX Open Source)
- [CVE-2024-23828](https://cve.now/CVE-2024-23828.md): Nginx-UI authenticated RCE through injecting into the application config via CRLF (CVSS 8.8, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2024-23827](https://cve.now/CVE-2024-23827.md): Nginx-UI arbitrary file write through the Import Certificate feature (CVSS 9.8, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2024-22198](https://cve.now/CVE-2024-22198.md): Authenticated (user role) arbitrary command execution by modifying \`start\_cmd\` setting (GHSL-2023-268) (CVSS 7.1, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2024-22196](https://cve.now/CVE-2024-22196.md): Authenticated (user role) SQL injection in \`OrderAndPaginate\` (GHSL-2023-270) (CVSS 7.0, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2024-22197](https://cve.now/CVE-2024-22197.md): Authenticated (user role) remote command execution by modifying \`nginx\` settings (GHSL-2023-269) (CVSS 7.7, 0xJacky nginx-ui · github.com/0xJacky/Nginx-UI)
- [CVE-2023-28724](https://cve.now/CVE-2023-28724.md): NGINX Management Suite vulnerability (CVSS 7.1, F5 NGINX Instance Manager · F5 NGINX API Connectivity Ma… +1)
- [CVE-2023-28656](https://cve.now/CVE-2023-28656.md): NGINX Management Suite vulnerability (CVSS 8.1, F5 NGINX Instance Manager · F5 NGINX API Connectivity Ma… +1)
- [CVE-2023-1550](https://cve.now/CVE-2023-1550.md): NGINX Agent vulnerability CVE-2023-1550 (CVSS 5.5, F5 NGINX Agent)
- [CVE-2022-41743](https://cve.now/CVE-2022-41743.md): NGINX ngx\_http\_hls\_module vulnerability CVE-2022-41743 (CVSS 7.0, F5 NGINX Plus)
- [CVE-2022-41742](https://cve.now/CVE-2022-41742.md): NGINX ngx\_http\_mp4\_module vulnerability CVE-2022-41742 (CVSS 7.1, F5 NGINX)
- [CVE-2022-41741](https://cve.now/CVE-2022-41741.md): NGINX ngx\_http\_mp4\_module vulnerability CVE-2022-41741 (CVSS 7.0, F5 NGINX)
- [CVE-2022-35241](https://cve.now/CVE-2022-35241.md): NGINX Instance Manager vulnerability CVE-2022-35241 (CVSS 6.5, F5 NGINX Instance Manager)
- [CVE-2022-30535](https://cve.now/CVE-2022-30535.md): NGINX Ingress Controller vulnerability CVE-2022-30535 (CVSS 6.5, F5 NGINX Ingress Controller)
- [CVE-2022-27495](https://cve.now/CVE-2022-27495.md): On all versions 1.3.x (fixed in 1.4.0) NGINX Service Mesh control plane endpoints are exposed to the cluster overlay network. (CVSS 6.5, F5 NGINX Service Mesh)
- [CVE-2021-23055](https://cve.now/CVE-2021-23055.md): On version 2.x before 2.0.3 and 1.x before 1.12.3, the command line restriction that controls snippet use with NGINX Ingress Controller does (no CVSS, NGINX Ingress Controller)
- [CVE-2022-23008](https://cve.now/CVE-2022-23008.md): On NGINX Controller API Management versions 3.18.0-3.19.0, an authenticated attacker with access to the "user" or "admin" role can use undis (no CVSS, NGINX Controller API Management)
- [CVE-2021-23017](https://cve.now/CVE-2021-23017.md): A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cau (no CVSS, Nginx Web Server, Nginx Plus)
- [CVE-2021-23021](https://cve.now/CVE-2021-23021.md): The Nginx Controller 3.x before 3.7.0 agent configuration file /etc/controller-agent/agent.conf is world readable with current permission bi (no CVSS, Nginx Controller)
- [CVE-2021-23020](https://cve.now/CVE-2021-23020.md): The NAAS 3.x before 3.10.0 API keys were generated using an insecure pseudo-random string and hashing algorithm which could lead to predicta (no CVSS, Nginx Controller)
- [CVE-2021-23019](https://cve.now/CVE-2021-23019.md): The NGINX Controller 2.0.0 thru 2.9.0 and 3.x before 3.15.0 Administrator password may be exposed in the systemd.txt file that is included i (no CVSS, Nginx Controller)
- [CVE-2021-23018](https://cve.now/CVE-2021-23018.md): Intra-cluster communication does not use TLS. (no CVSS, Nginx Controller)
- [CVE-2020-27730](https://cve.now/CVE-2020-27730.md): In versions 3.0.0-3.9.0, 2.0.0-2.9.0, and 1.0.1, the NGINX Controller Agent does not use absolute paths when calling system utilities. (no CVSS, NGINX Controller)
- [CVE-2020-5909](https://cve.now/CVE-2020-5909.md): In versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, when users run the command displayed in NGINX Controller user interface (UI) to fetch the a (no CVSS, NGINX Controller)
- [CVE-2020-5910](https://cve.now/CVE-2020-5910.md): In versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, the Neural Autonomic Transport System (NATS) messaging services in use by the NGINX Control (no CVSS, NGINX Controller)
- [CVE-2020-5911](https://cve.now/CVE-2020-5911.md): In versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, the NGINX Controller installer starts the download of Kubernetes packages from an HTTP URL (no CVSS, NGINX Controller)
- [CVE-2020-5901](https://cve.now/CVE-2020-5901.md): In NGINX Controller 3.3.0-3.4.0, undisclosed API endpoints may allow for a reflected Cross Site Scripting (XSS) attack. (no CVSS, NGINX Controller)
- [CVE-2020-5899](https://cve.now/CVE-2020-5899.md): In NGINX Controller 3.0.0-3.4.0, recovery code required to change a user's password is transmitted and stored in the database in plain text, (no CVSS, NGINX Controller)
- [CVE-2020-5900](https://cve.now/CVE-2020-5900.md): In versions 3.0.0-3.4.0, 2.0.0-2.9.0, and 1.0.1, there is insufficient cross-site request forgery (CSRF) protections for the NGINX Controlle (no CVSS, NGINX Controller)
- [CVE-2020-5895](https://cve.now/CVE-2020-5895.md): On NGINX Controller versions 3.1.0-3.3.0, AVRD uses world-readable and world-writable permissions on its socket, which allows processes or u (no CVSS, NGINX Controller)
- [CVE-2020-5894](https://cve.now/CVE-2020-5894.md): On versions 3.0.0-3.3.0, the NGINX Controller webserver does not invalidate the server-side session token after users log out. (no CVSS, NGINX Controller)
- [CVE-2020-5867](https://cve.now/CVE-2020-5867.md): In versions prior to 3.3.0, the NGINX Controller Agent installer script 'install.sh' uses HTTP instead of HTTPS to check and install package (no CVSS, NGINX Controller)
- [CVE-2020-5866](https://cve.now/CVE-2020-5866.md): In versions of NGINX Controller prior to 3.3.0, the helper.sh script, which is used optionally in NGINX Controller to change settings, uses (no CVSS, NGINX Controller)
- [CVE-2020-5864](https://cve.now/CVE-2020-5864.md): In versions of NGINX Controller prior to 3.2.0, communication between NGINX Controller and NGINX Plus instances skip TLS verification by def (no CVSS, NGINX Controller)
- [CVE-2020-5865](https://cve.now/CVE-2020-5865.md): In versions prior to 3.3.0, the NGINX Controller is configured to communicate with its Postgres database server over unencrypted channels, m (no CVSS, NGINX Controller)
- [CVE-2020-5863](https://cve.now/CVE-2020-5863.md): In NGINX Controller versions prior to 3.2.0, an unauthenticated attacker with network access to the Controller API can create unprivileged u (no CVSS, NGINX Controller)
- [CVE-2011-4968](https://cve.now/CVE-2011-4968.md): nginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack (MITM) (no CVSS, nginx)
- [CVE-2018-16843](https://cve.now/CVE-2018-16843.md): nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive memory consumption. (CVSS 5.3, \[UNKNOWN\] nginx)
- [CVE-2018-16844](https://cve.now/CVE-2018-16844.md): nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive CPU usage. (CVSS 5.3, \[UNKNOWN\] nginx)
- [CVE-2018-16845](https://cve.now/CVE-2018-16845.md): nginx before versions 1.15.6, 1.14.1 has a vulnerability in the ngx\_http\_mp4\_module, which might allow an attacker to cause infinite loop in (CVSS 8.2, \[UNKNOWN\] nginx)
- [CVE-2017-7529](https://cve.now/CVE-2017-7529.md): Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resultin (no CVSS, nginx)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/tech/nginx
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.