CVE-2024-46256: JC21 Nginx Proxy Manager

Critical severity, CVSS 9.8. EPSS: 3.1% chance of exploitation in the next 30 days.

A Command injection vulnerability in requestLetsEncryptSsl in NginxProxyManager 2.11.3 allows an attacker to RCE via Add Let's Encrypt Certificate.

Affected products

• JC21 Nginx Proxy Manager: version 2.11.3 only

Published 2024-09-27. Last modified 2026-06-17.