Feed live

nginx CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,287

All time

Critical · Active

11,990

CVSS ≥ 9.0

New · 14 days

2,743

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 31–60 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-33028	high	7.1/10	Nginx UI: Race Condition Leads to Persistent Data Corruption and Service Collapse	Mar 30, 2026 4mo ago
CVE-2026-33029	medium	6.9/10	Nginx UI: DoS via Negative Integer Input in Logrotate Interval	Mar 30, 2026 4mo ago
CVE-2026-33030	high	8.8/10	Nginx UI: Unencrypted Storage of DNS API Tokens and ACME Private Keys	Mar 30, 2026 4mo ago
CVE-2026-33032	critical	9.8/10	Nginx UI: Unauthenticated MCP Endpoint Allows Remote Nginx Takeover	Mar 30, 2026 4mo ago
CVE-2026-27651	high	7.5/10	NGINX ngx_mail_auth_http_module vulnerability	Mar 24, 2026 5mo ago
CVE-2026-28755	medium	5.4/10	NGINX ngx_stream_ssl_module vulnerability	Mar 24, 2026 5mo ago
CVE-2026-28753	low	3.7/10	NGINX ngx_mail_proxy_module vulnerability	Mar 24, 2026 5mo ago
CVE-2026-27654	high	8.2/10	NGINX ngx_http_dav_module vulnerability	Mar 24, 2026 5mo ago
CVE-2026-32647	high	7.8/10	NGINX ngx_http_mp4_module vulnerability	Mar 24, 2026 5mo ago
CVE-2026-27784	high	7.8/10	NGINX ngx_http_mp4_module vulnerability	Mar 24, 2026 5mo ago
CVE-2026-4342	high	8.8/10	ingress-nginx comment-based nginx configuration injection	Mar 19, 2026 5mo ago
CVE-2026-3288	high	8.8/10	ingress-nginx rewrite-target nginx configuration injection	Mar 9, 2026 5mo ago
CVE-2026-27944	critical	9.8/10	Nginx UI: Unauthenticated Backup Download with Encryption Key Disclosure	Mar 5, 2026 5mo ago
CVE-2026-2145	medium	5.1/10	cym1102 nginxWebUI Web Management check cross site scripting	Feb 8, 2026 6mo ago
CVE-2025-15566	high	8.8/10	ingress-nginx auth-proxy-set-headers nginx configuration injection	Feb 6, 2026 6mo ago
CVE-2026-1642	medium	5.9/10	NGINX vulnerability	Feb 4, 2026 6mo ago
CVE-2026-24514	medium	6.5/10	ingress-nginx Admission Controller denial of service	Feb 3, 2026 6mo ago
CVE-2026-24513	low	3.1/10	ingress-nginx auth-url protection bypass	Feb 3, 2026 6mo ago
CVE-2026-24512	high	8.8/10	ingress-nginx auth-method nginx configuration injection	Feb 3, 2026 6mo ago
CVE-2026-1580	high	8.8/10	ingress-nginx auth-method nginx configuration injection	Feb 3, 2026 6mo ago
CVE-2026-1616	high	7.5/10	osim: Path Traversal via query parameters in Nginx configuration	Jan 29, 2026 6mo ago
CVE-2025-62126	medium	5.3/10	WordPress Varnish/Nginx Proxy Caching plugin <= 1.8.3 - Sensitive Data Exposure vulnerability	Dec 31, 2025 7mo ago
CVE-2025-14727	high	8.3/10	NGINX Ingress Controller vulnerability	Dec 17, 2025 8mo ago
CVE-2025-66491	medium	5.9/10	Traefik has Inverted TLS Verification Logic in its ingress-nginx Provider	Dec 9, 2025 8mo ago
CVE-2025-12014	medium	4.3/10	NGINX Cache Optimizer <= 1.1 - Missing Authorization to Authenticated (Subscriber+) Dynamic Caching Exclusion Update	Oct 24, 2025 10mo ago
CVE-2025-58474	medium	5.3/10	BIG-IP Advanced WAF and ASM and NGINX App Protect DNS lookup vulnerability	Oct 15, 2025 10mo ago
CVE-2025-48360	medium	5.9/10	WordPress Varnish/Nginx Proxy Caching plugin <= 1.8.3 - Cross Site Scripting (XSS) vulnerability	Aug 28, 2025 12mo ago
CVE-2025-41452	medium	6.8/10	Post auth nginx configuration injection in Danfoss AK-SM8xxA Series	Aug 22, 2025 1y ago
CVE-2025-55740	medium	6.5/10	Default Credentials in nginx-defender Configuration Files	Aug 19, 2025 1y ago
CVE-2025-53859	low	3.7/10	NGINX ngx_mail_smtp_module vulnerability	Aug 13, 2025 1y ago