What’s Vulnerable › Products

NginxProxyManager nginx-proxy-manager vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your NginxProxyManager nginx-proxy-manager version is affected

Latest NginxProxyManager nginx-proxy-manager vulnerabilities

• CVE-2026-102335 — Nginx Proxy Manager through 2.16.0 Improper Authorization via advanced_config (CVSS 7.1)
• CVE-2026-102334 — Nginx Proxy Manager through 2.16.0 Missing Brute-Force Protection (CVSS 7.4)
• CVE-2026-93964 — NginxProxyManager nginx-proxy-manager Validate Route certificate.js internalCertificate.validate missing authentication (CVSS 5.3)
• CVE-2026-40519 — Nginx Proxy Manager Authenticated RCE via setupCertbotPlugins() (CVSS 7.5)