{"vulnerability": "cve-2026-40519", "sightings": [{"uuid": "8ceb7a74-9e0b-4481-bb52-c85bd9e5f956", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40519", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116719675922395584", "content": "A lot of offensive activities were identified targeting NginxProxyManager nginx-proxy-manager (CVE-2026-40519) https://vuldb.com/vuln/369296/cti", "creation_timestamp": "2026-06-09T10:28:36.350494Z"}, {"uuid": "6a832b79-c93c-482e-9028-1e866c24ffa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40519", "type": "seen", "source": "Telegram/Rc0b9T17FJVJElH6QZhazeHK_5sevkoWVsl-YVplQMonaEk", "content": "", "creation_timestamp": "2026-07-16T19:00:18.956358Z"}, {"uuid": "1b0e3097-7dc5-434f-88a9-480cc44545f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40519", "type": "published-proof-of-concept", "source": "Telegram/Rc0b9T17FJVJElH6QZhazeHK_5sevkoWVsl-YVplQMonaEk", "content": "", "creation_timestamp": "2026-07-18T00:00:24.393684Z"}, {"uuid": "b85620d8-12fb-453d-81be-ec2d7a7905ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40519", "type": "seen", "source": "https://bsky.app/profile/sakis.tech/post/3mwdeewuzsp2w", "content": "Nginx Proxy Manager 2.16.0: RCE-Fix und Log-Viewer\n\nDer Fix f\u00fcr CVE-2026-40519 lag 109 Tage im Quellcode, ohne Image. 2.16.0 bringt ihn endlich, dazu ein 2FA-Leck weniger, einen Log-Viewer, Zugriffslisten pro Pfad und eine Certbot-Warnung f\u00fcr DNS-Challenge-Nutzer.\n\n#homelab #docker", "creation_timestamp": "2026-09-25T08:34:32.254927Z"}]}