CVE-2026-61630 nginx ignition has TOTP Reuse During Validity Window

nginx ignition is a user interface for the nginx web server. In versions 2.33.0 through 2.35.0, any user that has enabled the OTP 2FA can have their TOTP reused during the standard 30 second validity window. Version 2.35.1 patches the issue...

CVE-2026-61630: Improper Authentication

nginx ignition is a user interface for the nginx web server. In versions 2.33.0 through 2.35.0, any user that has enabled the OTP 2FA can have their TOTP reused during the standard 30 second validity window. Version 2.35.1 patches the issue...

CVE-2026-61629: Allocation of Resources Without Limits or Throttling

nginx ignition is a user interface for the nginx web server. In versions 2.29.0 through 2.40.0, the gin i18n middleware in nginx-ignition's API server runs in front of every HTTP request and calls golang.org/x/text/language.ParseAcceptLanguage on the raw Accept-Language header without imposing an...

CVE-2026-61628: Concurrent Execution using Shared Resource with Improper Synchronization

nginx ignition is a user interface for the nginx web server. Prior to version 2.41.1, POST /api/users/onboarding/finish is registered as anonymous unauthenticated and creates a user with full ReadWrite admin permissions. Because the handler uses a check-then-act TOCTOU pattern between the...

CVE-2026-93964

A vulnerability was detected in NginxProxyManager nginx-proxy-manager up to 2.15.1. This impacts the function internalCertificate.validate of the file backend/internal/certificate.js of the component Validate Route. The manipulation results in missing authentication. The attack can be launched...

CVE-2026-93964

CVE-2026-93964 affects nginx-proxy-manager up to version 2.15.1 . The vulnerability exists in the internalCertificate.validate function within backend/internal/certificate.js (component: Validate Route). The root cause is a missing authentication check , allowing a remote, unauthenticated attacke...

CVE-2026-93964 NginxProxyManager nginx-proxy-manager Validate Route certificate.js internalCertificate.validate missing authentication

A vulnerability was detected in NginxProxyManager nginx-proxy-manager up to 2.15.1. This impacts the function internalCertificate.validate of the file backend/internal/certificate.js of the component Validate Route. The manipulation results in missing authentication. The attack can be launched...

EUVD-2026-83653

A vulnerability was detected in NginxProxyManager nginx-proxy-manager up to 2.15.1. This impacts the function internalCertificate.validate of the file backend/internal/certificate.js of the component Validate Route. The manipulation results in missing authentication. The attack can be launched...

CVE-2026-93964 NginxProxyManager nginx-proxy-manager Validate Route certificate.js internalCertificate.validate missing authentication

A vulnerability was detected in NginxProxyManager nginx-proxy-manager up to 2.15.1. This impacts the function internalCertificate.validate of the file backend/internal/certificate.js of the component Validate Route. The manipulation results in missing authentication. The attack can be launched...

nginx-1.31.6-1.1 on GA media (moderate)

nginx-1.31.6-1.1 on GA media Announcement ID: openSUSE-SU-2026:11807-1 Rating: moderate Cross-References: CVE-2026-90439 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the nginx-1.31.6-1.1...

Debian dla-4784 : libnginx-mod-http-geoip - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4784 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4784-1 [email protected]...

bunkerweb v1.6.15-rc3

🌐 Website | 🤝 Panel | 📓 Documentation | 👨‍💻 Demo | 📱 Demo UI | 🧩 Templates | 🛡️ Examples 💬 Chat | 📝 Forum | 📝 Community | 🗺️ Threatmap | 📊 Status | 🔎 Feedback 🛡️ Make security by default great again! BunkerWeb Bun...

CVE-2026-18329 affecting package nginx for versions less than 1.30.4-1

CVE-2026-18329 affecting package nginx for versions less than 1.30.4-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-78689 affecting package nginx for versions less than 1.30.4-1

CVE-2026-78689 affecting package nginx for versions less than 1.30.4-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-78222 affecting package nginx for versions less than 1.30.4-1

CVE-2026-78222 affecting package nginx for versions less than 1.30.4-1. An upgraded version of the package is available that resolves this issue...

CLEANSTART-2026-JE88659 Security fix for CVE-2025-22866 applied in: flux-notification-controller-fips 1.5.0-r0, ingress-nginx-controller 1.24.2-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0, nvidia-container-toolkit 1.19.0-r0

CVE-2025-22866 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-YH81834 Security fix for CVE-2024-45341 applied in: flux-notification-controller-fips 1.5.0-r0, ingress-nginx-controller 1.24.2-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0

CVE-2024-45341 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IH30576 Security fix for CVE-2017-7529 applied in: nginx 1.12.1-r0

Security vulnerability affects the nginx package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-HE94703 Security fix for CVE-2019-9516 applied in: nginx 1.16.1-r0, nodejs 10.16.3-r0

CVE-2019-9516 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DQ45317 Security fix for CVE-2018-16845 applied in: nginx 1.14.1-r0

Security vulnerability affects the nginx package. This issue is resolved in later releases. See references for vulnerability details...