Browse CVEs

CRITICAL 9.9 CVE-2026-44015 Nginx UI is a web user interface for the Nginx web server. In 2.3.4 and earlier, an authenticated user can perform Server-Side Request Forgery (SSRF)… Nginx Ui after 2.3.4 Fix from $2,3002026-05-12 CRITICAL 9.8 CVE-2026-42221 Nginx UI is a web user interface for the Nginx web server. From version 2.0.0 to before version 2.3.8, an unauthenticated network attacker can claim … Nginx Ui 2.3.8+ Fix from $2,3002026-05-04 CRITICAL 9.8 CVE-2026-42222 Nginx UI is a web user interface for the Nginx web server. In version 2.3.5, an unauthenticated bootstrap takeover exists in nginx-ui during the init… Nginx Ui Mitigation only Fix from $2,3002026-05-04 CRITICAL 9.8 CVE-2026-42238 Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, nginx-ui exposes a backup restore endpoint (POST /api/restore) tha… Nginx Ui 2.3.8+ Fix from $2,3002026-05-04 MEDIUM 6.5 CVE-2026-42223 Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, the GetSettings API handler (api/settings/settings.go:24-65) seria… Nginx Ui 2.3.8+ Fix from $1,6002026-05-04 MEDIUM 6.5 CVE-2026-42220 Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, an authenticated user can call GET /api/settings and retrieve sens… Nginx Ui 2.3.8+ Fix from $1,6002026-05-04 HIGH 8.1 CVE-2026-34403 Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.5, all WebSocket endpoints in nginx-ui use a gorilla/websocket Upgrad… Nginx Ui 2.3.5+ Fix from $1,9502026-04-20 HIGH 8.1 CVE-2026-33031 Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, a user who was disabled by an administrator can use previously iss… Nginx Ui 2.3.4+ Fix from $1,9502026-04-20 CRITICAL 9.1 CVE-2026-33026 Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, the nginx-ui backup restore mechanism allows attackers to tamper w… Nginx Ui 2.3.4+ Fix from $2,3002026-03-30 CRITICAL 9.9 CVE-2026-33030 Nginx UI is a web user interface for the Nginx web server. In versions 2.3.3 and prior, Nginx-UI contains an Insecure Direct Object Reference (IDOR) … Nginx Ui after 2.3.3 Fix from $2,3002026-03-30 CRITICAL 9.8 CVE-2026-33032EPSS 38% Nginx UI is a web user interface for the Nginx web server. In versions 2.3.5 and prior, the nginx-ui MCP (Model Context Protocol) integration exposes… Nginx Ui after 2.3.5 Fix from $2,3002026-03-30 MEDIUM 6.5 CVE-2026-33029 Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, an input validation vulnerability in the logrotate configuration a… Nginx Ui 2.3.4+ Fix from $1,6002026-03-30 MEDIUM 6.5 CVE-2026-33027 Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, the nginx-ui configuration improperly handles URL-encoded traversa… Nginx Ui 2.3.4+ Fix from $1,6002026-03-30 CRITICAL 9.8 CVE-2026-27944EPSS 22% Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.3, the /api/backup endpoint is accessible without authentication and … Nginx Ui 2.3.3+ Fix from $2,3002026-03-05 CRITICAL 9.8 CVE-2024-49368EPSS 27% Nginx UI is a web user interface for the Nginx web server. Prior to version 2.0.0-beta.36, when Nginx UI configures logrotate, it does not verify the… Nginx Ui after 1.9.9-4 Fix from $2,3002024-10-21 HIGH 7.5 CVE-2024-49366 Nginx UI is a web user interface for the Nginx web server. Nginx UI v2.0.0-beta.35 and earlier gets the value from the json field without verificatio… Nginx Ui after 1.9.9-4 Fix from $1,9502024-10-21 HIGH 7.5 CVE-2024-49367 Nginx UI is a web user interface for the Nginx web server. Prior to version 2.0.0-beta.36, the log path of nginxui is controllable. This issue can be… Nginx Ui after 1.9.9-4 Fix from $1,9502024-10-21 HIGH 8.8 CVE-2024-23828 Nginx-UI is a web interface to manage Nginx configurations. It is vulnerable to an authenticated arbitrary command execution via CRLF attack when cha… Nginx Ui 2.0.0+ Fix from $1,9502024-01-29 CRITICAL 9.8 CVE-2024-23827 Nginx-UI is a web interface to manage Nginx configurations. The Import Certificate feature allows arbitrary write into the system. The feature does n… Nginx Ui Mitigation only Fix from $2,3002024-01-29 HIGH 8.8 CVE-2024-22198 Nginx-UI is a web interface to manage Nginx configurations. It is vulnerable to arbitrary command execution by abusing the configuration settings. Th… Nginx Ui 2.0.0+ Fix from $1,9502024-01-11 MEDIUM 6.5 CVE-2024-22196 Nginx-UI is an online statistics for Server Indicators​​ Monitor CPU usage, memory usage, load average, and disk usage in real-time. This issue may l… Nginx Ui 2.0.0+ Fix from $1,6002024-01-11 HIGH 8.8 CVE-2024-22197 Nginx-ui is online statistics for Server Indicators​​ Monitor CPU usage, memory usage, load average, and disk usage in real-time. The `Home > Prefere… Nginx Ui 2.0.0+ Fix from $1,9502024-01-11