NG
Product
nginx-proxy-manager
5
CVEs
0
On KEV
7.5
Max CVSS
2
New 30D
Severity mix
Critical 0High 3Medium 2Low 0
Watch
Add nginx-proxy-manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-40519 | 7.5 | Jun 8 | Nginx Proxy Manager Authenticated RCE via setupCertbotPlugins() Affected: 2.9.14 through 2.15.1 |
| CVE-2026-102334 | 7.4 | Sep 28 | Nginx Proxy Manager through 2.16.0 Missing Brute-Force Protection Affected: through 2.16.0 |
| CVE-2026-102335 | 7.1 | Sep 28 | Nginx Proxy Manager through 2.16.0 Improper Authorization via advanced_config Affected: through 2.16.0 |
| CVE-2026-93964 | 5.3 | Sep 20 | NginxProxyManager nginx-proxy-manager Validate Route certificate.js internalCertificate.validate missing authentication Affected: 2.0; 2.1; 2.1.0; 2.1.1; 2.1.2; 2.2; +34 more |
| CVE-2022-28379 | 4.8 | Apr 3 | jc21.com Nginx Proxy Manager before 2.9.17 allows XSS during item deletion Affected: before 2.9.17 |
Showing 5