CVE-2026-61630

4.2 Moyenne

Publiée le 21/09/2026 à 17:17 · Modifiée le 24/09/2026 à 23:25 · Analyse NVD reportée · Source : security-advisories@github.com

Description

nginx ignition is a user interface for the nginx web server. In versions 2.33.0 through 2.35.0, any user that has enabled the OTP 2FA can have their TOTP reused during the standard 30 second validity window. Version 2.35.1 patches the issue.

Traduire en français

Produits concernés

lucasdillmann nginx-ignition

Scores CVSS

Version	Score	Source	Vecteur
3.1	4.2 Moyenne	security-advisories@github.com	`CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N`

Faiblesses (CWE)

CWE-287

Références

https://github.com/lucasdillmann/nginx-ignition/commit/1cbfae0296f1b186158f5a294ec484060e00102e
https://github.com/lucasdillmann/nginx-ignition/commit/8d35e1eb5dd6a40fef94a45511fe08b0603af107
https://github.com/lucasdillmann/nginx-ignition/security/advisories/GHSA-hf33-q6cf-c66f

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories