certbot

.. This file contains a series of comments that are used to include sections of this README in other files. Do not modify these comments unless you know what you are doing. tag:intro-begin |build-status| .. |build-status| image::...

CVE-2026-79766 Termix: OS command injection in ACME/Let's Encrypt certificate-request handler via admin-controlled domain/email

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.4.1 until 2.5.1, an authenticated Termix administrator can store attacker-controlled domain and email values through PATCH /users/acme-ssl-settings and trigger their interpolation...

CVE-2026-79766

The web-based server management platform Termix (versions 2.4.1 through 2.5.0) contains an OS command injection vulnerability in its ACME/Let's Encrypt certificate-request handler. An authenticated administrator can supply attacker-controlled domain and email values via PATCH /users/acme-ssl-sett...

CVE-2026-79766 Termix: OS command injection in ACME/Let's Encrypt certificate-request handler via admin-controlled domain/email

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.4.1 until 2.5.1, an authenticated Termix administrator can store attacker-controlled domain and email values through PATCH /users/acme-ssl-settings and trigger their interpolation...

CVE-2026-79766 Termix: OS command injection in ACME/Let's Encrypt certificate-request handler via admin-controlled domain/email

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.4.1 until 2.5.1, an authenticated Termix administrator can store attacker-controlled domain and email values through PATCH /users/acme-ssl-settings and trigger their interpolation...

PT-2026-97923

Name of the Vulnerable Software and Affected Versions Termix versions 2.4.1 through 2.5.0 Description An authenticated administrator can execute arbitrary operating-system commands as the backend process. This occurs because the application fails to properly sanitize domain and email values store...

certbot v5.8.0

.. This file contains a series of comments that are used to include sections of this README in other files. Do not modify these comments unless you know what you are doing. tag:intro-begin |build-status| .. |build-status| image::...

certbot-pinned (0.17.0), dcoscli (>=0.5.4, <=0.6.1) potentially affected by CVE-2026-69248 via cryptography (2.0.2)

cryptography PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - certbot-pinned 0.17.0 - dcoscli =0.5.4, =0.6.1 Source cves: CVE-2026-69248 Source advisory: OSV:PYSEC-2026-3554...

certbot-pinned (0.17.0), dcoscli (>=0.5.4, <=0.6.1) potentially affected by CVE-2026-69249 via cryptography (2.0.2)

cryptography PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - certbot-pinned 0.17.0 - dcoscli =0.5.4, =0.6.1 Source cves: CVE-2026-69249 Source advisory: OSV:PYSEC-2026-3553...

atsdk (0.2.24), auditor-apel-plugin (>=0.6.1, <=0.6.2) +64 more potentially affected by CVE-2026-69249 via cryptography (43.0.0)

cryptography PYPI version 43.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - atsdk 0.2.24 - auditor-apel-plugin =0.6.1, =0.0.2, =1.1.3, =2.0.0, =0.0.21, =0.2.1, =1.0.1, =1.1.7, =1.0.0, =1.5.3, =1.5.3, =1.5.7 and...

certbot-dns-mijn-host (>=0.0.2, <=0.0.9), codeforlife (>=0.22.10, <=0.25.22) +8 more potentially affected by CVE-2026-59890 via setuptools (74.0.0)

setuptools PYPI version 74.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - certbot-dns-mijn-host =0.0.2, =0.22.10, =7.2.1, =0.0.21, =10.4.0, =0.1.0, =0.5.3, =0.6.6 Source cves: CVE-2026-59890 Source advisory:...

certbot-pinned (0.17.0), dcoscli (>=0.5.4, <=0.6.1) potentially affected by CVE-2023-50782 via cryptography (2.0.2)

cryptography PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - certbot-pinned 0.17.0 - dcoscli =0.5.4, =0.6.1 Source cves: CVE-2023-50782 Source advisory: OSV:PYSEC-2026-1283...

certbot-pinned (0.17.0), dcoscli (>=0.5.4, <=0.6.1) potentially affected by CVE-2024-0727 via cryptography (2.0.2)

cryptography PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - certbot-pinned 0.17.0 - dcoscli =0.5.4, =0.6.1 Source cves: CVE-2024-0727 Source advisory: OSV:PYSEC-2026-1285...

CVE-2026-40519

Nginx Proxy Manager versions 2.9.14 through 2.15.1, fixed in commit a5db5ed, contain an authenticated remote code execution vulnerability via OS command injection in the setupCertbotPlugins function in backend/setup.js, allowing attackers with certificates:manage permission to execute arbitrary...

CVE-2026-40519 Nginx Proxy Manager Authenticated RCE via setupCertbotPlugins()

Nginx Proxy Manager versions 2.9.14 through 2.15.1, fixed in commit a5db5ed, contain an authenticated remote code execution vulnerability via OS command injection in the setupCertbotPlugins function in backend/setup.js, allowing attackers with certificates:manage permission to execute arbitrary...

CVE-2026-40519

Nginx Proxy Manager versions 2.9.14 through 2.15.1, fixed in commit a5db5ed, contain an authenticated remote code execution vulnerability via OS command injection in the setupCertbotPlugins function in backend/setup.js, allowing attackers with certificates:manage permission to execute arbitrary...

CVE-2026-40519 Nginx Proxy Manager Authenticated RCE via setupCertbotPlugins()

Nginx Proxy Manager versions 2.9.14 through 2.15.1, fixed in commit a5db5ed, contain an authenticated remote code execution vulnerability via OS command injection in the setupCertbotPlugins function in backend/setup.js, allowing attackers with certificates:manage permission to execute arbitrary...

CVE-2026-40519 Nginx Proxy Manager Authenticated RCE via setupCertbotPlugins()

Nginx Proxy Manager versions 2.9.14 through 2.15.1, fixed in commit a5db5ed, contain an authenticated remote code execution vulnerability via OS command injection in the setupCertbotPlugins function in backend/setup.js, allowing attackers with certificates:manage permission to execute arbitrary...

EUVD-2026-35196

Nginx Proxy Manager versions 2.9.14 through 2.15.1, fixed in commit a5db5ed, contain an authenticated remote code execution vulnerability via OS command injection in the setupCertbotPlugins function in backend/setup.js, allowing attackers with certificates:manage permission to execute arbitrary...

PT-2026-47446

Name of the Vulnerable Software and Affected Versions Nginx Proxy Manager versions 2.9.14 through 2.15.1 Description An authenticated remote code execution issue exists via OS command injection in the setupCertbotPlugins function located in backend/setup.js. Attackers with certificates:manage...