Nginx Defender
Approved changes feed: RSS · Atom
cpe:2.3:a:anipaleja:nginx-defender:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Anipaleja (9d415b01-1a44-50e1-a3bf-9fab0d148653) |
|---|---|
| Product | Nginx Defender (48ddd265-dd8d-5bc7-bbfb-603fed4a53d1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-55740 |
vulnerable | 2026-06-08 07:33:15.323682 |
Default Credentials in nginx-defender Configuration Files
MEDIUM (6.5)
nginx-defender is a high-performance, enterprise-grade Web Application Firewall (WAF) and threat detection system engineered for modern web infrastructure. This is a configuration vulnerability affecting nginx-defender deployments. Example configuration files
config.yaml and docker-compose.yml contain default credentials (default_password: "change_me_please", GF_SECURITY_ADMIN_PASSWORD=admin123). If users deploy nginx-defender without changing these defaults, attackers with network access could gain administrative control, bypassing security protections. The issue is addressed in v1.5.0 and later.
Published: 2025-08-19T19:52:25.777Z
Updated: 2025-08-19T20:05:46.786Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.