Login Request a demo
NG
Vendor
Nginxui
1 product with CVEs on record
32
CVEs
0
On KEV
9
New 30D
Products
NU
Nginx UI
Nginxui
9.9
32 CVEs0 on KEV9 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-107813
NU
Nginx UI
Nginxui
8.8
0%
Oct 9Nginx UI: Incomplete fix of CVE-2026-84315 - the api/cluster router was not - wrapped in RequireSecureSession, so those sensitive mutations run without OTP step-up
CVE-2026-107812
NU
Nginx UI
Nginxui
7.5
0%
Oct 9Nginx UI: Self-upgrade runs an unsigned binary verified only by a same-origin digest → RCE via a compromised mirror or MITM
CVE-2026-107811
NU
Nginx UI
Nginxui
8.8
0%
Oct 90xJacky/nginx-ui /api/nodes Leaks Cluster Node Tokens and Allows Cross-Node Impersonation as initUser
CVE-2026-107810
NU
Nginx UI
Nginxui
8.1
0%
Oct 9Nginx UI: Backup restore follows crafted symlinks into the live Nginx configuration path before restore flags are applied
CVE-2026-107809
NU
Nginx UI
Nginxui
8.8
0%
Oct 9Nginx-UI AuthRequired token cookie fallback enables CSRF against management APIs
CVE-2026-107808
NU
Nginx UI
Nginxui
8.1
0%
Oct 9Nginx UI: Authentication bypass: password login does not enforce a passkey-only second factor (2FA bypass)
CVE-2026-107807
NU
Nginx UI
Nginxui
8.8
0%
Oct 9Nginx UI: Node Secret Credential Exposure via URL Query Parameter
CVE-2026-107806
NU
Nginx UI
Nginxui
7.2
1%
Oct 9Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config Overwrite
CVE-2026-107805
NU
Nginx UI
Nginxui
7.5
0%
Oct 9Nginx UI: Unauthenticated signed-request body staging can exhaust temporary storage
CVE-2026-44015
NU
Nginx UI
Nginxui
9.9
0%
May 12Nginx UI: Server-Side Request Forgery (SSRF) via Cluster Proxy Middleware Allows Access to Internal Services
CVE-2026-42238
NU
Nginx UI
Nginxui
9.8
1%
May 4Unauthenticated Remote Code Execution via Backup Restore in nginx-ui
CVE-2026-42223
NU
Nginx UI
Nginxui
6.5
0%
May 4nginx-ui: Settings API Exposes Protected Secrets
CVE-2026-42222
NU
Nginx UI
Nginxui
9.8
0%
May 4nginx-ui: Unauthenticated first-boot instance claim via POST /api/install allows remote bootstrap takeover
CVE-2026-42221
NU
Nginx UI
Nginxui
9.8
1%
May 4nginx-ui: Unauthenticated First-Run Installer Allows Remote Initial Admin Claim
CVE-2026-42220
NU
Nginx UI
Nginxui
6.5
0%
May 4nginx-ui: Authenticated settings disclosure exposes node.secret and enables trusted-node authentication abuse, backup exfiltration, and restore-based nginx-ui state rollback
CVE-2026-34403
NU
Nginx UI
Nginxui
8.1
0%
Apr 20Nginx-UI vulnerable to Cross-Site WebSocket Hijacking (CSWSH) via missing origin validation on all WebSocket endpoints
CVE-2026-33031
NU
Nginx UI
Nginxui
8.1
0%
Apr 20Nginx-UI: Disabled users retain full API access through previously issued bearer tokens
CVE-2026-33026
NU
Nginx UI
Nginxui
9.1
0%
Mar 30nginx-ui Backup Restore Allows Tampering with Encrypted Backups
CVE-2026-33027
NU
Nginx UI
Nginxui
6.5
0%
Mar 30Nginx UI: Improper Path Validation Allows Recursive Deletion of the Nginx Configuration Directory
CVE-2026-33028
NU
Nginx UI
Nginxui
7.5
1%
Mar 30Nginx UI: Race Condition Leads to Persistent Data Corruption and Service Collapse
CVE-2026-33029
NU
Nginx UI
Nginxui
6.5
1%
Mar 30Nginx UI: DoS via Negative Integer Input in Logrotate Interval
CVE-2026-33030
NU
Nginx UI
Nginxui
9.9
0%
Mar 30Nginx UI: Unencrypted Storage of DNS API Tokens and ACME Private Keys
CVE-2026-33032
NU
Nginx UI
Nginxui
9.8
35%
Mar 30Nginx UI: Unauthenticated MCP Endpoint Allows Remote Nginx Takeover
CVE-2026-27944
NU
Nginx UI
Nginxui
9.8
23%
Mar 5Nginx UI: Unauthenticated Backup Download with Encryption Key Disclosure
CVE-2024-49368
NU
Nginx UI
Nginxui
9.8
28%
Oct 21Nginx UI is a web user interface for the Nginx web server
CVE-2024-49367
NU
Nginx UI
Nginxui
7.5
1%
Oct 21Nginx UI is a web user interface for the Nginx web server
CVE-2024-49366
NU
Nginx UI
Nginxui
7.5
1%
Oct 21Nginx UI is a web user interface for the Nginx web server
CVE-2024-23828
NU
Nginx UI
Nginxui
8.8
1%
Jan 29Nginx-UI is a web interface to manage Nginx configurations
CVE-2024-23827
NU
Nginx UI
Nginxui
9.8
1%
Jan 29Nginx-UI is a web interface to manage Nginx configurations
CVE-2024-22198
NU
Nginx UI
Nginxui
8.8
4%
Jan 11Nginx-UI is a web interface to manage Nginx configurations
CVE-2024-22196
NU
Nginx UI
Nginxui
6.5
1%
Jan 11Nginx-UI is an online statistics for Server Indicators​​ Monitor CPU usage, memory usage, load average, and disk usage in real-time
CVE-2024-22197
NU
Nginx UI
Nginxui
8.8
2%
Jan 11Nginx-ui is online statistics for Server Indicators​​ Monitor CPU usage, memory usage, load average, and disk usage in real-time