Known Vulnerabilities for Nginx by F5
Listed below are 10 of the newest known vulnerabilities associated with "Nginx" by "F5".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-102335 json | Nginx Proxy Manager through 2.16.0 fails to restrict the advanced_config field to administrators, allowing non-admin users wi... | Not Provided | 2026-09-28 | 2026-09-30 |
| CVE-2026-102334 json | Nginx Proxy Manager through 2.16.0 lacks rate-limiting on authentication endpoints, allowing unauthenticated attackers to mak... | Not Provided | 2026-09-28 | 2026-09-29 |
| CVE-2026-100717 json | froxlor is a server administration panel. In versions 2.3.10 and earlier, Validate::validateUrl rejects carriage return and l... | Not Provided | 2026-09-26 | 2026-09-30 |
| CVE-2026-100669 json | Grav before 2.0.25 ships web server configuration samples whose access-control deny rules are matched case-sensitively. In we... | Not Provided | 2026-09-26 | 2026-09-30 |
| CVE-2026-94419 json | Without NO_SESSION_CACHE_REF, wolfSSL_get_session() does not return a session object but a ClientSession reference of the for... | Not Provided | 2026-09-27 | 2026-09-29 |
| CVE-2026-94417 json | When an application enables both OCSP and CRL revocation checking on one WOLFSSL_CTX or certificate manager, wolfSSL skips th... | Not Provided | 2026-09-27 | 2026-09-29 |
| CVE-2026-93964 json | A vulnerability was detected in NginxProxyManager nginx-proxy-manager up to 2.15.1. This impacts the function internalCertifi... | Not Provided | 2026-09-20 | 2026-09-22 |
| CVE-2026-93302 json | MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that ... | Not Provided | 2026-09-27 | 2026-09-29 |
| CVE-2026-90937 json | froxlor versions before 2.2.5 fail to validate newline characters in subdomain redirect URLs, allowing authenticated customer... | Not Provided | 2026-09-14 | 2026-09-16 |
| CVE-2026-90651 json | Socket Firewall (socketdev/socket-registry-firewall) in registry mode before 2.0.0 does not verify upstream TLS certificates ... | Not Provided | 2026-09-13 | 2026-09-14 |