CVE-2020-7621: IBM Strongloop Nginx Controller

Critical severity, CVSS 9.8. EPSS: 3% chance of exploitation in the next 30 days.

strong-nginx-controller through 1.0.2 is vulnerable to Command Injection. It allows execution of arbitrary command as part of the '_nginxCmd()' function.

Affected products

• IBM Strongloop Nginx Controller: up to and including 1.0.2

Published 2020-04-02. Last modified 2026-06-17.