CVE-2026-93964 - Vulnerability Details

- NginxProxyManager nginx-proxy-manager Validate Route certificate.js internalCertificate.validate missing authentication

Description

A vulnerability was detected in NginxProxyManager nginx-proxy-manager up to 2.15.1. This impacts the function internalCertificate.validate of the file backend/internal/certificate.js of the component Validate Route. The manipulation results in missing authentication. The attack can be launched remotely. The exploit is now public and may be used. Endpoint only processes and echoes back the certificate the caller submits (no stored data leaked); the real risk is unauthenticated openssl processing of attacker input. The project was informed of the problem early through an issue report but has not responded yet.

Published: 2026-09-20

Score: 6.9 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

NginxProxyManager

nginx-proxy-manager

affected

Version	Status	Constraints
`2.0`	affected	—
`2.1`	affected	—
`2.1.0`	affected	—
`2.1.1`	affected	—
`2.1.2`	affected	—
`2.2`	affected	—
`2.2.0`	affected	—
`2.2.1`	affected	—
`2.2.2`	affected	—
`2.2.3`	affected	—
`2.2.4`	affected	—
`2.3`	affected	—
`2.3.0`	affected	—
`2.3.1`	affected	—
`2.4`	affected	—
`2.4.0`	affected	—
`2.5`	affected	—
`2.5.0`	affected	—
`2.6`	affected	—
`2.6.0`	affected	—
`2.6.1`	affected	—
`2.6.2`	affected	—
`2.7`	affected	—
`2.7.0`	affected	—
`2.7.1`	affected	—
`2.7.2`	affected	—
`2.7.3`	affected	—
`2.8`	affected	—
`2.8.0`	affected	—
`2.8.1`	affected	—
`2.9`	affected	—
`2.9.0`	affected	—
`2.9.1`	affected	—
`2.9.2`	affected	—
`2.9.3`	affected	—
`2.9.4`	affected	—
`2.9.5`	affected	—
`2.9.6`	affected	—
`2.9.7`	affected	—
`2.9.8`	affected	—
`2.9.9`	affected	—
`2.9.10`	affected	—
`2.9.11`	affected	—
`2.9.12`	affected	—
`2.9.13`	affected	—
`2.9.14`	affected	—
`2.9.15`	affected	—
`2.9.16`	affected	—
`2.9.17`	affected	—
`2.9.18`	affected	—
`2.9.19`	affected	—
`2.9.20`	affected	—
`2.9.21`	affected	—
`2.9.22`	affected	—
`2.10`	affected	—
`2.10.0`	affected	—
`2.10.1`	affected	—
`2.10.2`	affected	—
`2.10.3`	affected	—
`2.10.4`	affected	—
`2.11`	affected	—
`2.12`	affected	—
`2.13`	affected	—
`2.14.0`	affected	—
`2.15.0`	affected	—
`2.15.1`	affected	—

No data.

Vendor Product Confidence Versions

Nginxproxymanager

Nginx Proxy Manager

95%

Version	Status	Scheme	Platform
`[2.0,2.15.1]`	affected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

This CVE is not in the KEV list.

The EPSS score is 0.00273.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://github.com/NginxProxyManager/nginx-proxy-manager/
https://github.com/NginxProxyManager/nginx-proxy-manager/issues/5594
https://vuldb.com/cve/CVE-2026-93964
https://vuldb.com/submit/944336
https://vuldb.com/vuln/407923
https://vuldb.com/vuln/407923/cti

History

Sun, 20 Sep 2026 07:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Nginxproxymanager nginx Proxy Manager
Vendors & Products		Nginxproxymanager nginx Proxy Manager

Sun, 20 Sep 2026 05:45:00 +0000

Type	Values Removed	Values Added
Description		A vulnerability was detected in NginxProxyManager nginx-proxy-manager up to 2.15.1. This impacts the function internalCertificate.validate of the file backend/internal/certificate.js of the component Validate Route. The manipulation results in missing authentication. The attack can be launched remotely. The exploit is now public and may be used. Endpoint only processes and echoes back the certificate the caller submits (no stored data leaked); the real risk is unauthenticated openssl processing of attacker input. The project was informed of the problem early through an issue report but has not responded yet.
Title		NginxProxyManager nginx-proxy-manager Validate Route certificate.js internalCertificate.validate missing authentication
First Time appeared		Nginxproxymanager Nginxproxymanager nginx-proxy-manager
Weaknesses		CWE-287 CWE-306
CPEs		cpe:2.3:a:nginxproxymanager:nginx-proxy-manager::::::::
Vendors & Products		Nginxproxymanager Nginxproxymanager nginx-proxy-manager
References		https://github.com/NginxProxyManager/nginx-proxy-manager/ https://github.com/NginxProxyManager/nginx-proxy-manager/issues/5594 https://vuldb.com/cve/CVE-2026-93964 https://vuldb.com/submit/944336 https://vuldb.com/vuln/407923 https://vuldb.com/vuln/407923/cti
Metrics		cvssV2_0 `{'score': 5, 'vector': 'AV:N/AC:L/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:UR'}` cvssV3_0 `{'score': 5.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R'}` cvssV3_1 `{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R'}` cvssV4_0 `{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P'}`

Subscriptions

Nginxproxymanager Nginx-proxy-manager Nginx Proxy Manager

MITRE

Status: PUBLISHED

Assigner: VulDB

Published: 2026-09-20T05:30:17.064Z

Updated: 2026-09-20T05:30:17.064Z

Reserved: 2026-09-19T10:14:26.749Z

Link: CVE-2026-93964

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-09-20T06:16:50.477

Modified: 2026-09-20T06:16:50.477

Link: CVE-2026-93964

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-09-20T07:15:16Z

Weaknesses

CWE-287
Improper Authentication
CWE-306
Missing Authentication for Critical Function

Tracking

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object