Nginxproxymanager Nginx-Proxy-Manager
4 CVEs affecting Nginxproxymanager Nginx-Proxy-Manager. Latest disclosed: 2026-09-28. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-40519 | High | 7.5 | 2026-06-08 | Nginx Proxy Manager versions 2.9.14 through 2.15.1, fixed in commit a5db5ed, contain an authenticated remote code execution vulnerability via OS command inject… |
CVE-2026-102334 | High | 7.4 | 2026-09-28 | Nginx Proxy Manager through 2.16.0 lacks rate-limiting on authentication endpoints, allowing unauthenticated attackers to make unlimited password guesses again… |
CVE-2026-102335 | High | 7.1 | 2026-09-28 | Nginx Proxy Manager through 2.16.0 fails to restrict the advanced_config field to administrators, allowing non-admin users with manage permissions to inject ar… |
CVE-2026-93964 | Medium | 5.3 | 2026-09-20 | A vulnerability was detected in NginxProxyManager nginx-proxy-manager up to 2.15.1. This impacts the function internalCertificate.validate of the file backend/… |