NginxProxyManager nginx-proxy-manager

3 known vulnerabilities in NginxProxyManager nginx-proxy-manager, 1 critical, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-102335 CVSS 7.1 high Nginx Proxy Manager through 2.16.0 fails to restrict the advanced_config field to administrators, allowing non-admin users with manage…
  • CVE-2026-102334 CVSS 9.1 critical Nginx Proxy Manager through 2.16.0 lacks rate-limiting on authentication endpoints, allowing unauthenticated attackers to make unlimited…
  • CVE-2026-93964 CVSS 5.5 medium A vulnerability was detected in NginxProxyManager nginx-proxy-manager up to 2.15.1. This impacts the function internalCertificate.validate…