영향받는 버전 라인
알려진 취약점
| CVE | 제목 | 영향 버전 | CVSS | 악용 | EPSS | 공개일 |
|---|---|---|---|---|---|---|
| CVE-2026-102335 | Nginx Proxy Manager through 2.16.0 Improper Authorization via advanced_config | ≤ 2.16.0 | 7.1 | — | 2026-09-29 | |
| CVE-2026-102334 | Nginx Proxy Manager through 2.16.0 Missing Brute-Force Protection | ≤ 2.16.0 | 9.1 | — | 2026-09-29 | |
| CVE-2026-93964 | NginxProxyManager nginx-proxy-manager Validate Route certificate.js internalCertificate.validate missing authe... | = 2.0 = 2.1 = 2.1.0 | 6.9 | — | 2026-09-20 | |
| CVE-2026-40519 | Nginx Proxy Manager Authenticated RCE via setupCertbotPlugins() | ≥ 2.9.14 ≤ 2.15.1 | 7.7 | — | 2026-06-09 | |
| CVE-2025-50579 | A CORS misconfiguration in Nginx Proxy Manager v2.12.3 allows unauthorized domains to access sensitive data, p... | * | 5.3 | — | 2025-08-19 | |
| CVE-2024-46257 | A Command injection vulnerability in requestLetsEncryptSslWithDnsChallenge in NginxProxyManager 2.11.3 allows... | * | 6.3 | — | 2024-09-27 | |
| CVE-2024-46256 | A Command injection vulnerability in requestLetsEncryptSsl in NginxProxyManager 2.11.3 allows an attacker to R... | * | 9.8 | — | 2024-09-27 | |
| CVE-2024-39935 | jc21 NGINX Proxy Manager before 2.11.3 allows backend/internal/certificate.js OS command injection by an authe... | * | 8.8 | — | 2024-07-04 | |
| CVE-2023-27224 | An issue found in NginxProxyManager v.2.9.19 allows an attacker to execute arbitrary code via a lua script to... | * | 9.8 | — | 2023-03-22 | |
| CVE-2023-23596 | jc21 NGINX Proxy Manager through 2.9.19 allows OS command injection. When creating an access list, the backend... | * | 8.8 | — | 2023-01-20 | |
| CVE-2022-28379 | jc21.com Nginx Proxy Manager before 2.9.17 allows XSS during item deletion. | * | 6.8 | — | 2022-04-04 |
내 서버의 버전을 직접 추적하세요
InfraGuard 는 모든 서버에 설치된 소프트웨어 버전을 수집하고, 알려진 취약점이 있는 버전을 알려 줍니다. 자체 호스팅이라 데이터가 내 네트워크를 벗어나지 않습니다.
데이터: CVE List(CVE® Program), NVD, CISA KEV, FIRST EPSS(EPSS 는 https://www.first.org/epss 참고), endoflife.date. 소프트웨어 목록: awesome-selfhosted(CC BY-SA 3.0).