https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T06:40:16.029165+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-250203 EUVD-2026-250203 2026-10-07T06:40:16.031332+00:00 EUVD-2026-250203 https://cve.radiocsirt.org/vuln/fkie_cve-2025-55740 fkie_cve-2025-55740 2026-10-07T06:40:16.031368+00:00

nginx-defender is a high-performance, enterprise-grade Web Application Firewall (WAF) and threat detection system engineered for modern web infrastructure. This is a configuration vulnerability affecting nginx-defender deployments. Example configuration files config.yaml and docker-compose.yml contain default credentials (default_password: "change_me_please", GF_SECURITY_ADMIN_PASSWORD=admin123). If users deploy nginx-defender without changing these defaults, attackers with network access could gain administrative control, bypassing security protections. The issue is addressed in v1.5.0 and later.

 https://cve.radiocsirt.org/vuln/ghsa-pr72-8fxw-xx22 GHSA-pr72-8fxw-xx22 — Default Credentials in nginx-defender Configuration Files 2026-10-07T06:40:16.031404+00:00

Affected: Go: github.com/Anipaleja/nginx-defender

### Impact This is a configuration vulnerability affecting nginx-defender deployments. Example configuration files [config.yaml](https://github.com/Anipaleja/nginx-defender/blob/main/config.yaml), [docker-compose.yml](https://github.com/Anipaleja/nginx-defender/blob/main/docker-compose.yml) contain default credentials (`default_password: "change_me_please"`, `GF_SECURITY_ADMIN_PASSWORD=admin123`). If users deploy nginx-defender without changing these defaults, attackers with network access could gain administrative control, bypassing security protections.

**Who is impacted?** All users who deploy nginx-defender with default credentials and expose the admin interface to untrusted networks.

### Patches The issue is addressed in v1.5.0 and later.

Startup warnings are added if default credentials are detected. Documentation now strongly recommends changing all default passwords before deployment. Patched versions: 1.5.0 and later **Will be fully patched in v1.7.0 and later**

### Workarounds Users can remediate the vulnerability without upgrading by manually changing all default credentials in configuration files before deployment: ```yaml # config.yaml auth: default_password: "your_strong_password_here" ```

```yml # docker-compose.yml - GF_SECURITY_ADMIN_PASSWORD=your_strong_password ``` Restrict access to the admin interface and use environment variables for secrets.

### References - [Security Configuration Guide](https://github.com/Anipaleja/nginx-defender/blob/main/d…