| CVE-2026-60062 |
The NGINX Agent config_dirs directive allows a low-privileged attacker to gain limited read and write access to files…
|
6.4
Moyenne
|
15 juil. 2026 |
| CVE-2024-10318 |
A session fixation issue was discovered in the NGINX OpenID Connect reference implementation, where a nonce was not…
|
5.4
Moyenne
|
6 nov. 2024 |
| CVE-2023-28724 |
NGINX Management Suite default file permissions are set such that an authenticated attacker may be able to modify…
|
7.1
Élevée
|
3 mai 2023 |
| CVE-2023-28656 |
NGINX Management Suite may allow an authenticated attacker to gain access to configuration objects outside of their…
|
8.1
Élevée
|
3 mai 2023 |
| CVE-2022-35241 |
In versions 2.x before 2.3.1 and all versions of 1.x, when NGINX Instance Manager is in use, undisclosed requests can…
|
6.5
Moyenne
|
4 août 2022 |