Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

nginx-proxy-manager · Vulnerability

CVSS 4.0 6.9 MEDIUMCVSS 3.1 5.3 MEDIUMCVSS 3.0 5.3 MEDIUMCVSS 2.0 5.0 Check source for fixed versionsKEV status unknown

cve-program · CVE-2026-93964

Published

A vulnerability was detected in NginxProxyManager nginx-proxy-manager up to 2.15.1. This impacts the function internalCertificate.validate of the file backend/internal/certificate.js of the component Validate Route. The manipulation results in missing authentication. The attack can be launched remotely. The exploit is now public and may be used. Endpoint only processes and echoes back the certificate the caller submits (no stored data leaked); the real risk is unauthenticated openssl processing of attacker input. The project was informed of the problem early through an issue report but has not responded yet.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-93964

Published

nginx-proxy-manager

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "NginxProxyManager",
                    "product": "nginx-proxy-manager",
                    "versions": [
                        {
                            "version": "2.0",
                            "status": "affected"
                        },
                        {
                            "version": "2.1",
                            "status": "affected"
                        },
                        {
                            "version": "2.1.0",
                            "status": "affected"
                        },
                        {
                            "version": "2.1.1",
                            "status": "affected"
                        },
                        {
                            "version": "2.1.2",
                            "status": "affected"
                        },
                        {
                            "version": "2.2",
                            "status": "affected"
                        },
                        {
                            "version": "2.2.0",
                            "status": "affected"
                        },
                        {
                            "version": "2.2.1",
                            "status": "affected"
                        },
                        {
                            "version": "2.2.2",
                            "status": "affected"
                        },
                        {
                            "version": "2.2.3",
                            "status": "affected"
                        },
                        {
                            "version": "2.2.4",
                            "status": "affected"
                        },
                        {
                            "version": "2.3",
                            "status": "affected"
                        },
                        {
                            "version": "2.3.0",
                            "status": "affected"
                        },
                        {
                            "version": "2.3.1",
                            "status": "affected"
                        },
                        {
                            "version": "2.4",
                            "status": "affected"
                        },
                        {
                            "version": "2.4.0",
                            "status": "affected"
                        },
                        {
                            "version": "2.5",
                            "status": "affected"
                        },
                        {
                            "version": "2.5.0",
                            "status": "affected"
                        },
                        {
                            "version": "2.6",
                            "status": "affected"
                        },
                        {
                            "version": "2.6.0",
                            "status": "affected"
                        },
                        {
                            "version": "2.6.1",
                            "status": "affected"
                        },
                        {
                            "version": "2.6.2",
                            "status": "affected"
                        },
                        {
                            "version": "2.7",
                            "status": "affected"
                        },
                        {
                            "version": "2.7.0",
                            "status": "affected"
                        },
                        {
                            "version": "2.7.1",
                            "status": "affected"
                        },
                        {
                            "version": "2.7.2",
                            "status": "affected"
                        },
                        {
                            "version": "2.7.3",
                            "status": "affected"
                        },
                        {
                            "version": "2.8",
                            "status": "affected"
                        },
                        {
                            "version": "2.8.0",
                            "status": "affected"
                        },
                        {
                            "version": "2.8.1",
                            "status": "affected"
                        },
                        {
                            "version": "2.9",
                            "status": "affected"
                        },
                        {
                            "version": "2.9.0",
                            "status": "affected"
                        },
                        {
                            "version": "2.9.1",
                            "status": "affected"
                        },
                        {
                            "version": "2.9.2",
                            "status": "affected"
                        },
                        {
                            "version": "2.9.3",
                            "status": "affected"
                        },
                        {
                            "version": "2.9.4",
                            "status": "affected"
                        },
                        {
                            "version": "2.9.5",
                            "status": "affected"
                        },
                        {
                            "version": "2.9.6",
                            "status": "affected"
                        },
                        {
                            "version": "2.9.7",
                            "status": "affected"
                        },
                        {
                            "version": "2.9.8",
                            "status": "affected"
                        },
                        {
                            "version": "2.9.9",
                            "status": "affected"
                        },
                        {
                            "version": "2.9.10",
                            "status": "affected"
                        },
                        {
                            "version": "2.9.11",
                            "status": "affected"
                        },
                        {
                            "version": "2.9.12",
                            "status": "affected"
                        },
                        {
                            "version": "2.9.13",
                            "status": "affected"
                        },
                        {
                            "version": "2.9.14",
                            "status": "affected"
                        },
                        {
                            "version": "2.9.15",
                            "status": "affected"
                        },
                        {
                            "version": "2.9.16",
                            "status": "affected"
                        },
                        {
                            "version": "2.9.17",
                            "status": "affected"
                        },
                        {
                            "version": "2.9.18",
                            "status": "affected"
                        },
                        {
                            "version": "2.9.19",
                            "status": "affected"
                        },
                        {
                            "version": "2.9.20",
                            "status": "affected"
                        },
                        {
                            "version": "2.9.21",
                            "status": "affected"
                        },
                        {
                            "version": "2.9.22",
                            "status": "affected"
                        },
                        {
                            "version": "2.10",
                            "status": "affected"
                        },
                        {
                            "version": "2.10.0",
                            "status": "affected"
                        },
                        {
                            "version": "2.10.1",
                            "status": "affected"
                        },
                        {
                            "version": "2.10.2",
                            "status": "affected"
                        },
                        {
                            "version": "2.10.3",
                            "status": "affected"
                        },
                        {
                            "version": "2.10.4",
                            "status": "affected"
                        },
                        {
                            "version": "2.11",
                            "status": "affected"
                        },
                        {
                            "version": "2.12",
                            "status": "affected"
                        },
                        {
                            "version": "2.13",
                            "status": "affected"
                        },
                        {
                            "version": "2.14.0",
                            "status": "affected"
                        },
                        {
                            "version": "2.15.0",
                            "status": "affected"
                        },
                        {
                            "version": "2.15.1",
                            "status": "affected"
                        }
                    ],
                    "cpes": [
                        "cpe:2.3:a:nginxproxymanager:nginx-proxy-manager:*:*:*:*:*:*:*:*"
                    ],
                    "modules": [
                        "Validate Route"
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 12 Nov 23:52 UTC · 273 of 275 readable · 271 fully read · documentation 469/469 current