Exposición de Nginx

Reverse proxies, Web servers
405
score de exposición
2.081.367
sitios usan
1
en explotación
18
críticos

CVEs

186 resultados
CVE-2025-14727HIGHNGINX Ingress Controller vulnerabilityEPSS 0.4%CVE-2026-61628HIGHnginx ignition has Unauthenticated Admin Account Creation via Onboarding Race ConditionEPSS 0.4%CVE-2025-23776MEDIUMWordPress Cache Sniper for Nginx plugin <= 1.0.4.2 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2026-61629HIGHnginx ignition has ParseAcceptLanguage `_` separator bypass that enables ~75x CPU amplification via Accept-Language header in i18nMiddlewareEPSS 0.4%CVE-2026-84360HIGHNginx UI: OTP secure-session step-up can be bypassed via MCP configuration toolsEPSS 0.4%CVE-2026-84314HIGHNginx UI: Account Takeover via Missing `RequireSecureSession` on User Management EndpointEPSS 0.4%CVE-2026-107808HIGHNginx UI: Authentication bypass: password login does not enforce a passkey-only second factor (2FA bypass)EPSS 0.4%CVE-2026-33027MEDIUMNginx UI: Improper Path Validation Allows Recursive Deletion of the Nginx Configuration DirectoryEPSS 0.4%CVE-2026-90581MEDIUMcym1102 nginxWebUI autoUpdate MainController.autoUpdate code injectionEPSS 0.4%CVE-2026-116472LOWingress-nginx mirror-target self-DOSEPSS 0.4%CVE-2020-5865—In versions prior to 3.3.0, the NGINX Controller is configured to communicate with its Postgres database server over unencrypted channels, mEPSS 0.4%CVE-2020-5909—In versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, when users run the command displayed in NGINX Controller user interface (UI) to fetch the aEPSS 0.4%CVE-2026-94197HIGHNGINX Ingress Controller vulnerabilityEPSS 0.4%CVE-2025-58474MEDIUMBIG-IP Advanced WAF and ASM and NGINX App Protect DNS lookup vulnerabilityEPSS 0.4%CVE-2026-61630MEDIUMnginx ignition has TOTP Reuse During Validity WindowEPSS 0.4%CVE-2026-1642HIGHNGINX vulnerabilityEPSS 0.4%CVE-2026-104939HIGHNGINX Ingress Controller vulnerabilityEPSS 0.4%CVE-2026-40460MEDIUMNGINX ngx_quic_module vulnerabilityEPSS 0.4%CVE-2024-10318MEDIUMNGINX OpenID Connect VulnerabilityEPSS 0.4%CVE-2024-56236MEDIUMWordPress Hestia Nginx Cache plugin <= 2.4.0 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.4%