Skip to content
OpenAdvisories

Vendor

NginxProxyManager

4 known vulnerabilities.

Products

nginx-proxy-manager 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.4
    CVE-2026-102334 Public exploit

    Nginx Proxy Manager through 2.16.0 Missing Brute-Force Protection

    Nginx Proxy Manager through 2.16.0 lacks rate-limiting on authentication endpoints, allowing unauthenticated attackers to make unlimited password guesses against any account. Attackers can brute-force login credentials via POST /api/tokens and subsequently gu…

    NginxProxyManager nginx-proxy-manager