Nginxproxymanager vulnerabilities

Products

• Nginx-proxy-manager 4
• Nginx Proxy Manager 3

Newest

• nginxproxymanager nginx-proxy-manager Nginx Proxy Manager through 2.16.0 Improper Authorization via advanced_config CVE-2026-102335 7.1 HighSeptember 28, 2026
• nginxproxymanager nginx-proxy-manager Nginx Proxy Manager through 2.16.0 Missing Brute-Force Protection CVE-2026-102334 9.1 CriticalSeptember 28, 2026
• nginxproxymanager nginx-proxy-manager NginxProxyManager nginx-proxy-manager Validate Route certificate.js internalCertificate.validate missing authentication CVE-2026-93964 6.9 MediumSeptember 20, 2026
• nginxproxymanager nginx-proxy-manager Nginx Proxy Manager Authenticated RCE via setupCertbotPlugins() CVE-2026-40519 7.7 HighJune 8, 2026
• jc21 nginx proxy manager A Command injection vulnerability in requestLetsEncryptSslWithDnsChallenge in NginxProxyManager 2... CVE-2024-46257 6.3 MediumSeptember 27, 2024
• jc21 nginx proxy manager A Command injection vulnerability in requestLetsEncryptSsl in NginxProxyManager 2.11.3 allows an... CVE-2024-46256 Public exploit 9.8 CriticalSeptember 27, 2024
• nginxproxymanager nginx proxy manager jc21.com Nginx Proxy Manager before 2.9.17 allows XSS during item deletion. CVE-2022-28379 EPSS 71.2% 6.8 MediumApril 3, 2022