85 exploited vulnerabilities in Nginx
- Vendors
- Nginx, Nginx-Ui, Cloudflare, Lyft, Ory, Alpine
- With known exploits
- 85
- Affected Nginxui Nginx Ui versions
- β€ 2.3.5
- Affected Ory Oathkeeper versions
- < 26.2.0
- Affected Vasion Virtual Appliance Application versions
- < 20.0.2614
- Affected Vasion Virtual Appliance Host versions
- < 22.0.1002
- Affected Roxy-wi versions
- < 6.1.1.0, 8.2.6.3, 6.3.5.0
- Affected Authelia versions
- < 4.25.1, 4.29.3
- Affected Rack versions
- < 2.2.20, 3.1.18, 3.2.3, 2.2.14, 3.0.16, 3.1.14
- Affected Gl-inet gl-ax1800 Firmware versions
- = 4.3.7, 4.4.6
Vulnerabilities with exploits
Highest CVSS first β 20 of these already have exploit code on Sploitus
CVE-2026-33032 8 exploits
CVE-2026-33494
CVE-2025-34203
CVE-2022-31161 4 exploits
CVE-2022-31137 14 exploits
CVE-2021-32637
CVE-2025-58048
CVE-2025-61919
CVE-2023-50919 3 exploits
CVE-2021-45967
CVE-2020-12443
CVE-2018-1000653
CVE-2017-20005 1 exploit
CVE-2009-3555 16 exploits
CVE-2024-3149
CVE-2023-33977 1 exploit
CVE-2023-45132
CVE-2022-24790
CVE-2026-42533 15 exploits
CVE-2026-42530 7 exploits
CVE-2026-9256 10 exploits
CVE-2026-42945 87 exploits
CVE-2025-59951
CVE-2026-27654 6 exploits
CVE-2026-27811
CVE-2025-71234
CVE-2019-13980
CVE-2026-49975 20 exploits
CVE-2026-26061
CVE-2026-27633 1 exploit
CVE-2026-23838
CVE-2025-67731
CVE-2019-11043 84 exploits
CVE-2026-29613
CVE-2026-54652
CVE-2026-45565
CVE-2025-46727
CVE-2024-53991
CVE-2023-25803
CVE-2022-41347
CVE-2021-42717 2 exploits
CVE-2021-29509
CVE-2017-7529 21 exploits
CVE-2016-1247 5 exploits
CVE-2021-23017 18 exploits
CVE-2026-3547
CVE-2026-22265
CVE-2025-32021
CVE-2024-27306
CVE-2024-24827 1 exploit