CyberSecBulletin

Nazgul vulnerabilities

We track 2 vulnerabilities in Nazgul products across 2 products. 2 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on January 11, 2023.

2vulnerabilities
2critical
0high
1exploited
9.8average CVSS score

Latest Nazgul vulnerabilities

  • 9.8 Critical severity

    Nostromo: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2022-48253NazgulEPSS 3.65%

    nhttpd in Nostromo before 2.1 is vulnerable to a path traversal that may allow an attacker to execute arbitrary commands on the remote server. The vulnerability occurs when the homedirs option is used.

  • 9.8 Critical severity

    Nostromo nhttpd Directory Traversal Exploited

    CVE-2019-16278NazgulEPSS 99%

    Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a crafted HTTP request.