Vulnerabilities

TI-2026-44137 CVE-2026-61628 · GHSA-pxcx-fv34-x9p5

nginx ignition has Unauthenticated Admin Account Creation via Onboarding Race Condition

HIGH 70

nginx ignition is a user interface for the nginx web server.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00434 Published 2026-09-21 Fixed in 2.41.1, 0.0.0-20260621194639-0586b4e55ab CWE-362

TI-2026-44138 CVE-2026-61629 · GHSA-jr34-h97m-9hpx

Resource allocation without limits in lucasdillmann nginx-ignition

HIGH 72

nginx ignition is a user interface for the nginx web server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00421 Published 2026-09-21 Fixed in 2.40.1, 0.0.0-20260526022344-0c988fc1277c CWE-770

TI-2026-44139 CVE-2026-61630 · GHSA-hf33-q6cf-c66f

nginx ignition has TOTP Reuse During Validity Window

LOW 20

nginx ignition is a user interface for the nginx web server.

CVSS 3.1MEDIUM 4.2 Network High privileges User interaction EPSS 0.00381 Published 2026-09-21 Fixed in 2.35.1, 0.0.0-20260328015550-8d35e1eb5dd6 CWE-287

Vulnerabilities

Filters

nginx ignition has Unauthenticated Admin Account Creation via Onboarding Race Condition

Resource allocation without limits in lucasdillmann nginx-ignition

nginx ignition has TOTP Reuse During Validity Window