CVE security advisories and vulnerability history for nginx.
nginx has 104 published CVE records since 2009, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 49 have a known public exploit. The average CVSS base score across scored CVEs is 7.5.
A quick read on nginx's vulnerability posture, as a share of its 104 published CVEs.
across 104 scored CVEs
67 of 104 scored
0 of 104 CVEs
49 of 104 CVEs
79 of 104 CVEs
How the CVSS severity of nginx's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
In CISA’s Known Exploited Vulnerabilities catalog
0
None of nginx's CVEs are currently listed in CISA's KEV catalog.
Public exploits
49
49 of nginx's CVEs have a known public exploit available.
The nginx products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.
The CWE weakness categories most often found in nginx CVEs. Follow any weakness for its full explanation.
The CVE Numbering Authorities that publish nginx CVE records.
How many nginx CVEs were published each year.
The most recently disclosed vulnerabilities affecting nginx.
Get an alert for each new nginx CVE, with AI-written analysis and remediation steps.
Monitor nginx CVEsCVE counts for other vendors.
Common questions about nginx vulnerabilities.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Get an alert for each new nginx CVE, with AI-written analysis and remediation steps.
