Skip to content
Threat Feed
Subscribe

Product

Nginx Proxy Manager (<= 2.16.0)

1 brief RSS
high advisory

Nginx Proxy Manager Authentication Brute-Force Vulnerability

Nginx Proxy Manager versions 2.16.0 and earlier lack rate-limiting on authentication endpoints, enabling unauthenticated attackers to perform credential stuffing and bypass MFA via brute-force.

Nginx Proxy Manager vulnerability access-control proxy
1r 2t 1c