nginxproxymanager nginx proxy manager vulnerabilities

Latest nginxproxymanager nginx proxy manager CVEs

Newest publication first

1. CVE-2024-46256 A Command injection vulnerability in requestLetsEncryptSsl in NginxProxyManager 2.11.3 allows an attacker to RCE via Add Let's Encrypt Certificate.

   Published 2024-09-27

   Critical·CVSS 9.8 EPSS 3.1%

   A Command injection vulnerability in requestLetsEncryptSsl in NginxProxyManager 2.11.3 allows an attacker to RCE via Add Let's Encrypt Certificate.

2. CVE-2024-46257 A Command injection vulnerability in requestLetsEncryptSslWithDnsChallenge in NginxProxyManager 2.11.3 allows an attacker to achieve remote code execution via Add Let's Encrypt Certificate. NOTE: this...

   Published 2024-09-27

   Medium·CVSS 6.3 EPSS 1.3%

   A Command injection vulnerability in requestLetsEncryptSslWithDnsChallenge in NginxProxyManager 2.11.3 allows an attacker to achieve remote code execution via Add Let's Encrypt Certificate. NOTE: this is not part of any NGINX software shipped by F5.

3. CVE-2022-28379 jc21.com Nginx Proxy Manager before 2.9.17 allows XSS during item deletion.

   Published 2022-04-03

   Medium·CVSS 4.8 EPSS 71.2%

   jc21.com Nginx Proxy Manager before 2.9.17 allows XSS during item deletion.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.