Nginx proxy manager
This hub aggregates every CVE we track for Nginx proxy manager, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.
8
CVEs tracked
2
Critical
2
High
0
In CISA KEV
Severity distribution
MEDIUM4HIGH2CRITICAL2
Monthly trend
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
0
0
2024-102026-09
Latest CVEs
The 8 most recently published vulnerabilities affecting Nginx proxy manager.
- CVE-2025-50579A CORS misconfiguration in Nginx Proxy Manager v2.12.3 allows unauthorized domains to access sensitive data, particularly JWT tokens, due to improper validation of the Origin header. This misconfig...5.3
- CVE-2024-46256A Command injection vulnerability in requestLetsEncryptSsl in NginxProxyManager 2.11.3 allows an attacker to RCE via Add Let's Encrypt Certificate.9.8
- CVE-2024-46257A Command injection vulnerability in requestLetsEncryptSslWithDnsChallenge in NginxProxyManager 2.11.3 allows an attacker to achieve remote code execution via Add Let's Encrypt Certificate. NOTE: t...6.3
- CVE-2024-39935jc21 NGINX Proxy Manager before 2.11.3 allows backend/internal/certificate.js OS command injection by an authenticated user (with certificate management privileges) via untrusted input to the DNS p...8.8
- CVE-2023-27224An issue found in NginxProxyManager v.2.9.19 allows an attacker to execute arbitrary code via a lua script to the configuration file.9.8
- CVE-2023-23596jc21 NGINX Proxy Manager through 2.9.19 allows OS command injection. When creating an access list, the backend builds an htpasswd file with crafted username and/or password input that is concatenat...8.8
- CVE-2022-28379jc21.com Nginx Proxy Manager before 2.9.17 allows XSS during item deletion.6.8
- CVE-2019-15517jc21 Nginx Proxy Manager before 2.0.13 allows %2e%2e%2f directory traversal.5.5
Product normalization is registry-driven with AI assist and human review. How it works