Skip to content
Threat Feed
Subscribe

Vendor

Nginx Proxy Manager

1 brief RSS
high advisory

Nginx Proxy Manager Authentication Brute-Force Vulnerability

Nginx Proxy Manager versions 2.16.0 and earlier lack rate-limiting on authentication endpoints, enabling unauthenticated attackers to perform credential stuffing and bypass MFA via brute-force.

Nginx Proxy Manager vulnerability access-control proxy
1r 2t 1c