Exposure of Nginx

Reverse proxies, Web servers
405
exposure score
2,081,367
sites use
1
exploited
18
critical

CVEs

186 results
CVE-2024-3737MEDIUMcym1102 nginxWebUI addOver findCountByQuery path traversalEPSS 0.9%CVE-2020-8553MEDIUMKubernetes ingress-nginx Compromise of auth via subset/superset namespace namesEPSS 0.9%CVE-2024-31079MEDIUMNGINX HTTP/3 QUIC vulnerabilityEPSS 0.9%CVE-2024-34161MEDIUMNGINX HTTP/3 QUIC vulnerabilityEPSS 0.9%CVE-2024-32760MEDIUMNGINX HTTP/3 QUIC vulnerabilityEPSS 0.9%CVE-2026-97205CRITICALNGINX ngx_http_core_module vulnerabilityEPSS 0.8%CVE-2026-84318HIGHNginx UI: MCP `nginx_config_add` Bypasses Directive Validation — Authenticated RCEEPSS 0.8%CVE-2024-3740MEDIUMcym1102 nginxWebUI reload exec deserializationEPSS 0.8%CVE-2022-41741HIGHNGINX ngx_http_mp4_module vulnerability CVE-2022-41741EPSS 0.8%CVE-2025-6213HIGHNginx Cache Purge Preload <= 2.1.1 - Authenticated (Administrator+) Remote Code ExecutionEPSS 0.8%CVE-2021-23055—On version 2.x before 2.0.3 and 1.x before 1.12.3, the command line restriction that controls snippet use with NGINX Ingress Controller doesEPSS 0.8%CVE-2026-78689CRITICALNGINX ngx_http_js_module vulnerablilityEPSS 0.8%CVE-2022-35241MEDIUMNGINX Instance Manager vulnerability CVE-2022-35241EPSS 0.8%CVE-2026-60005HIGHNGINX ngx_http_slice_module vulnerabilityEPSS 0.7%CVE-2026-42934MEDIUMNGINX ngx_http_charset_module vulnerabilityEPSS 0.7%CVE-2022-30535MEDIUMNGINX Ingress Controller vulnerability CVE-2022-30535EPSS 0.7%CVE-2024-23827CRITICALNginx-UI arbitrary file write through the Import Certificate featureEPSS 0.7%CVE-2025-62126MEDIUMWordPress Varnish/Nginx Proxy Caching plugin <= 1.8.3 - Sensitive Data Exposure vulnerabilityEPSS 0.7%CVE-2021-25748HIGHIngress-nginx `path` sanitization can be bypassed with newline characterEPSS 0.7%CVE-2026-40701MEDIUMNGINX ngx_http_ssl_module vulnerabilityEPSS 0.7%