Skip to content
OpenAdvisories

Product · F5

NGINX Instance Manager

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-60062

    NGINX Agent Vulnerability

    The NGINX Agent config_dirs directive allows a low-privileged attacker to gain limited read and write access to files outside of the designated secure directory. The config_dirs directive required for this issue can also be configured through NGINX Instance M…

    F5 NGINX Instance Manager NGINX Agent Network devices
  • Medium 5.4
    CVE-2024-10318

    NGINX OpenID Connect Vulnerability

    A session fixation issue was discovered in the NGINX OpenID Connect reference implementation, where a nonce was not checked at login time. This flaw allows an attacker to fix a victim's session to an attacker-controlled account. As a result, although the atta…

    F5 NGINX Ingress Controller NGINX Instance Manager NGINX API Connectivity Manager Network devices
  • Medium 6.5
    CVE-2022-35241

    NGINX Instance Manager vulnerability CVE-2022-35241

    In versions 2.x before 2.3.1 and all versions of 1.x, when NGINX Instance Manager is in use, undisclosed requests can cause an increase in disk resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

    F5 NGINX Instance Manager Network devices