CVE-2024-46256

CVE-2024-46256 Nginx Proxy Manager RCE 漏洞分析 环境搭建 1. 运行 Nginx Proxy Manager 2.11.3 环境 docker-compose up -d 或者可以使用自动化脚本： python setupenvironment.py 2. 访问 Nginx Proxy Manager URL: http://localhost:81 完成初始配置后进行测试 使用默认管理员账户登录（邮箱：[email protected] / 密码：changeme） 确认证书签发相关功能的访问权限 漏洞信息 CVE ID :...

Simulation_CVE-2024-46256

CVE-2024-46256 与 CVE-2024-46257 – PoC 模拟 概述 本仓库包含一个逐步、以截图辅助的概念验证（PoC），模拟 Nginx Proxy Manager 中的两个漏洞，这些漏洞可实现 OS 命令注入，进而在身份验证后实现远程代码执行（RCE）。 受影响产品：Nginx Proxy Manager 受影响版本：v2.11.3 影响：认证后的 RCE（在 PoC 中观察到以 root 权限执行） 内容 POC.md：详细的分析与利用步骤记录，包括 payload 和观察结果。 static/：POC.md 中按出现顺序引用的截图。 使用方法 1. 打开...

EUVD-2026-88567

Nginx Proxy Manager through 2.16.0 lacks rate-limiting on authentication endpoints, allowing unauthenticated attackers to make unlimited password guesses against any account. Attackers can brute-force login credentials via POST /api/tokens and subsequently guess TOTP codes via POST /api/tokens/2f...

EUVD-2026-88568

Nginx Proxy Manager through 2.16.0 fails to restrict the advancedconfig field to administrators, allowing non-admin users with manage permissions to inject arbitrary nginx directives. Attackers can inject malicious nginx configuration such as alias directives to serve arbitrary files or control...

CVE-2026-102335

Nginx Proxy Manager through 2.16.0 fails to restrict the advancedconfig field to administrators, allowing non-admin users with manage permissions to inject arbitrary nginx directives. Attackers can inject malicious nginx configuration such as alias directives to serve arbitrary files or control...

CVE-2026-102334

Nginx Proxy Manager through 2.16.0 lacks rate-limiting on authentication endpoints, allowing unauthenticated attackers to make unlimited password guesses against any account. Attackers can brute-force login credentials via POST /api/tokens and subsequently guess TOTP codes via POST /api/tokens/2f...

CVE-2026-102334 Nginx Proxy Manager through 2.16.0 Missing Brute-Force Protection

Nginx Proxy Manager through 2.16.0 lacks rate-limiting on authentication endpoints, allowing unauthenticated attackers to make unlimited password guesses against any account. Attackers can brute-force login credentials via POST /api/tokens and subsequently guess TOTP codes via POST /api/tokens/2f...

CVE-2026-102335 Nginx Proxy Manager through 2.16.0 Improper Authorization via advanced_config

Nginx Proxy Manager through 2.16.0 fails to restrict the advancedconfig field to administrators, allowing non-admin users with manage permissions to inject arbitrary nginx directives. Attackers can inject malicious nginx configuration such as alias directives to serve arbitrary files or control...

CVE-2026-102334 Nginx Proxy Manager through 2.16.0 Missing Brute-Force Protection

Nginx Proxy Manager through 2.16.0 lacks rate-limiting on authentication endpoints, allowing unauthenticated attackers to make unlimited password guesses against any account. Attackers can brute-force login credentials via POST /api/tokens and subsequently guess TOTP codes via POST /api/tokens/2f...

CVE-2026-102335

Nginx Proxy Manager versions up to and including 2.16.0 is vulnerable to an improper authorization flaw in the advanced_config field. This flaw allows non-administrator users with manage permissions to inject arbitrary nginx directives . By exploiting this, an attacker can inject malicious config...

CVE-2026-102335 Nginx Proxy Manager through 2.16.0 Improper Authorization via advanced_config

Nginx Proxy Manager through 2.16.0 fails to restrict the advancedconfig field to administrators, allowing non-admin users with manage permissions to inject arbitrary nginx directives. Attackers can inject malicious nginx configuration such as alias directives to serve arbitrary files or control...

CVE-2026-102334

Nginx Proxy Manager versions through 2.16.0 are vulnerable to brute-force attacks due to a lack of rate-limiting on authentication endpoints. Unauthenticated attackers can make unlimited password guesses via POST /api/tokens and subsequently guess TOTP codes via POST /api/tokens/2fa . Successful ...

CVE-2026-102335 Nginx Proxy Manager through 2.16.0 Improper Authorization via advanced_config

Nginx Proxy Manager through 2.16.0 fails to restrict the advancedconfig field to administrators, allowing non-admin users with manage permissions to inject arbitrary nginx directives. Attackers can inject malicious nginx configuration such as alias directives to serve arbitrary files or control...

CVE-2026-102334 Nginx Proxy Manager through 2.16.0 Missing Brute-Force Protection

Nginx Proxy Manager through 2.16.0 lacks rate-limiting on authentication endpoints, allowing unauthenticated attackers to make unlimited password guesses against any account. Attackers can brute-force login credentials via POST /api/tokens and subsequently guess TOTP codes via POST /api/tokens/2f...

CVE-2026-93964

A vulnerability was detected in NginxProxyManager nginx-proxy-manager up to 2.15.1. This impacts the function internalCertificate.validate of the file backend/internal/certificate.js of the component Validate Route. The manipulation results in missing authentication. The attack can be launched...

CVE-2026-93964

CVE-2026-93964 affects nginx-proxy-manager up to version 2.15.1 . The vulnerability exists in the internalCertificate.validate function within backend/internal/certificate.js (component: Validate Route). The root cause is a missing authentication check , allowing a remote, unauthenticated attacke...

CVE-2026-93964 NginxProxyManager nginx-proxy-manager Validate Route certificate.js internalCertificate.validate missing authentication

A vulnerability was detected in NginxProxyManager nginx-proxy-manager up to 2.15.1. This impacts the function internalCertificate.validate of the file backend/internal/certificate.js of the component Validate Route. The manipulation results in missing authentication. The attack can be launched...

CVE-2026-93964 NginxProxyManager nginx-proxy-manager Validate Route certificate.js internalCertificate.validate missing authentication

A vulnerability was detected in NginxProxyManager nginx-proxy-manager up to 2.15.1. This impacts the function internalCertificate.validate of the file backend/internal/certificate.js of the component Validate Route. The manipulation results in missing authentication. The attack can be launched...

EUVD-2026-83653

A vulnerability was detected in NginxProxyManager nginx-proxy-manager up to 2.15.1. This impacts the function internalCertificate.validate of the file backend/internal/certificate.js of the component Validate Route. The manipulation results in missing authentication. The attack can be launched...

PT-2026-95911

Name of the Vulnerable Software and Affected Versions nginx-proxy-manager versions prior to 2.15.2 Description Missing authentication in the Validate Route component allows remote attackers to manipulate the internalCertificate.validate function within the backend/internal/certificate.js file. Th...