cve.bz

likaia nginxpulse vulnerabilities, newest first

Filter

By year: all 2026 2025 2024 2023 2022 2021

  1. 9.3CVE-2026-129171

    NginxPulse 1.5.0 before 1.6.26 contains an unauthenticated sql injection vulnerability that allows remote attackers to append SQL via the id and locationType parameters of /api/stats/:type. Attackers can close the quoted table-name identif…