| CVE-2026-60062 |
The NGINX Agent config_dirs directive allows a low-privileged attacker to gain limited read and write access to files…
|
6.4
Medium
|
Jul 15, 2026 |
| CVE-2024-10318 |
A session fixation issue was discovered in the NGINX OpenID Connect reference implementation, where a nonce was not…
|
5.4
Medium
|
Nov 6, 2024 |
| CVE-2023-28724 |
NGINX Management Suite default file permissions are set such that an authenticated attacker may be able to modify…
|
7.1
High
|
May 3, 2023 |
| CVE-2023-28656 |
NGINX Management Suite may allow an authenticated attacker to gain access to configuration objects outside of their…
|
8.1
High
|
May 3, 2023 |
| CVE-2022-35241 |
In versions 2.x before 2.3.1 and all versions of 1.x, when NGINX Instance Manager is in use, undisclosed requests can…
|
6.5
Medium
|
Aug 4, 2022 |