Feed live

nginx CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

344,180

All time

Critical · Active

11,533

CVSS ≥ 9.0

New · 14 days

2,691

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 1–30 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-60005	high	8.2/10	NGINX ngx_http_slice_module vulnerability	Jul 15, 2026 22d ago
CVE-2026-60065	low	3.7/10	NGINX Plus ngx_stream_mqtt_filter_module vulnerability	Jul 15, 2026 22d ago
CVE-2026-56434	medium	6.5/10	NGINX ngx_http_ssi_module vulnerability	Jul 15, 2026 22d ago
CVE-2026-60062	medium	6.4/10	NGINX Agent Vulnerability	Jul 15, 2026 22d ago
CVE-2026-52865	medium	6.5/10	NGINX Ingress Controller vulnerability	Jul 15, 2026 22d ago
CVE-2026-42533	high	8.1/10	NGINX Map directive and Regex matching vulnerability	Jul 15, 2026 22d ago
CVE-2026-55723	high	8.3/10	NGINX Ingress Controller vulnerability	Jul 15, 2026 22d ago
CVE-2026-42530	high	8.1/10	NGINX Open-Source ngx_http_v3_module vulnerability	Jun 17, 2026 1mo ago
CVE-2026-42055	high	8.1/10	NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability	Jun 17, 2026 1mo ago
CVE-2026-40519	high	7.7/10	Nginx Proxy Manager Authenticated RCE via setupCertbotPlugins()	Jun 8, 2026 1mo ago
CVE-2026-9256	high	8.1/10	NGINX ngx_http_rewrite_module vulnerability	May 22, 2026 2mo ago
CVE-2026-8711	high	8.1/10	NGINX JavaScript vulnerability	May 19, 2026 2mo ago
CVE-2026-42926	medium	5.8/10	NGINX ngx_http_proxy_v2_module vulnerability	May 13, 2026 2mo ago
CVE-2026-40460	medium	6.5/10	NGINX ngx_quic_module vulnerability	May 13, 2026 2mo ago
CVE-2026-42946	medium	6.5/10	NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerability	May 13, 2026 2mo ago
CVE-2026-42934	medium	4.8/10	NGINX ngx_http_charset_module vulnerability	May 13, 2026 2mo ago
CVE-2026-42945	high	8.1/10	NGINX ngx_http_rewrite_module vulnerability	May 13, 2026 2mo ago
CVE-2026-40701	medium	4.8/10	NGINX ngx_http_ssl_module vulnerability	May 13, 2026 2mo ago
CVE-2026-44015	high	8.5/10	Nginx UI: Server-Side Request Forgery (SSRF) via Cluster Proxy Middleware Allows Access to Internal Services	May 12, 2026 2mo ago
CVE-2026-8430	high	8.1/10	SPIP < 4.4.14 Remote Code Execution via nginx	May 12, 2026 2mo ago
CVE-2026-42238	critical	9.0/10	Unauthenticated Remote Code Execution via Backup Restore in nginx-ui	May 4, 2026 3mo ago
CVE-2026-42223	medium	6.5/10	nginx-ui: Settings API Exposes Protected Secrets	May 4, 2026 3mo ago
CVE-2026-42222	high	8.1/10	nginx-ui: Unauthenticated first-boot instance claim via POST /api/install allows remote bootstrap takeover	May 4, 2026 3mo ago
CVE-2026-42221	high	8.1/10	nginx-ui: Unauthenticated First-Run Installer Allows Remote Initial Admin Claim	May 4, 2026 3mo ago
CVE-2026-42220	medium	6.5/10	nginx-ui: Authenticated settings disclosure exposes node.secret and enables trusted-node authentication abuse, backup exfiltration, and restore-based nginx-ui state rollback	May 4, 2026 3mo ago
CVE-2026-34403	medium	5.5/10	Nginx-UI vulnerable to Cross-Site WebSocket Hijacking (CSWSH) via missing origin validation on all WebSocket endpoints	Apr 20, 2026 3mo ago
CVE-2026-33031	high	8.6/10	Nginx-UI: Disabled users retain full API access through previously issued bearer tokens	Apr 20, 2026 3mo ago
CVE-2026-34830	medium	5.9/10	Rack: Rack::Sendfile regex injection via HTTP_X_ACCEL_MAPPING header allows arbitrary file reads through nginx	Apr 2, 2026 4mo ago
CVE-2026-33026	critical	9.4/10	nginx-ui Backup Restore Allows Tampering with Encrypted Backups	Mar 30, 2026 4mo ago
CVE-2026-33027	medium	6.9/10	Nginx UI: Improper Path Validation Allows Recursive Deletion of the Nginx Configuration Directory	Mar 30, 2026 4mo ago