Exposure of Nginx

Reverse proxies, Web servers
401
exposure score
2,081,367
sites use
1
exploited
18
critical

CVEs

185 results
CVE-2021-25745HIGHIngress-nginx path can be pointed to service account token fileEPSS 1.2%CVE-2022-41742HIGHNGINX ngx_http_mp4_module vulnerability CVE-2022-41742EPSS 1.2%CVE-2020-5910—In versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, the Neural Autonomic Transport System (NATS) messaging services in use by the NGINX ControlEPSS 1.2%CVE-2020-5863—In NGINX Controller versions prior to 3.2.0, an unauthenticated attacker with network access to the Controller API can create unprivileged uEPSS 1.2%CVE-2026-27784HIGHNGINX ngx_http_mp4_module vulnerabilityEPSS 1.1%CVE-2024-24989HIGHNGINX HTTP/3 QUIC vulnerabilityEPSS 1.1%CVE-2020-5864—In versions of NGINX Controller prior to 3.2.0, communication between NGINX Controller and NGINX Plus instances skip TLS verification by defEPSS 1.1%CVE-2024-23828HIGHNginx-UI authenticated RCE through injecting into the application config via CRLFEPSS 1.1%CVE-2020-5894—On versions 3.0.0-3.3.0, the NGINX Controller webserver does not invalidate the server-side session token after users log out.EPSS 1.0%CVE-2020-5911—In versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, the NGINX Controller installer starts the download of Kubernetes packages from an HTTP URL EPSS 1.0%CVE-2026-33029MEDIUMNginx UI: DoS via Negative Integer Input in Logrotate IntervalEPSS 1.0%CVE-2026-42238CRITICALUnauthenticated Remote Code Execution via Backup Restore in nginx-uiEPSS 1.0%CVE-2026-27651HIGHNGINX ngx_mail_auth_http_module vulnerabilityEPSS 1.0%CVE-2026-32647HIGHNGINX ngx_http_mp4_module vulnerabilityEPSS 0.9%CVE-2024-35200MEDIUMNGINX HTTP/3 QUIC vulnerabilityEPSS 0.9%CVE-2026-42946HIGHNGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerabilityEPSS 0.9%CVE-2026-40519HIGHNginx Proxy Manager Authenticated RCE via setupCertbotPlugins()EPSS 0.9%CVE-2024-3736MEDIUMcym1102 nginxWebUI upload unrestricted uploadEPSS 0.9%CVE-2024-24990HIGHNGINX HTTP/3 QUIC vulnerabilityEPSS 0.9%CVE-2024-3737MEDIUMcym1102 nginxWebUI addOver findCountByQuery path traversalEPSS 0.9%