Vulnerability index

Browse CVEs

22 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Nginx Ui CRITICAL 9.9
CVE-2026-44015

Nginx UI is a web user interface for the Nginx web server. In 2.3.4 and earlier, an authenticated user can perform Server-Side Request Forgery (SSRF)…

Fix: after 2.3.4
Fix from $2,300 2026-05-12
Nginx Ui CRITICAL 9.8
CVE-2026-42221

Nginx UI is a web user interface for the Nginx web server. From version 2.0.0 to before version 2.3.8, an unauthenticated network attacker can claim …

Fix: 2.3.8+
Fix from $2,300 2026-05-04
Nginx Ui CRITICAL 9.8
CVE-2026-42222

Nginx UI is a web user interface for the Nginx web server. In version 2.3.5, an unauthenticated bootstrap takeover exists in nginx-ui during the init…

Mitigation only
Fix from $2,300 2026-05-04
Nginx Ui CRITICAL 9.8
CVE-2026-42238

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, nginx-ui exposes a backup restore endpoint (POST /api/restore) tha…

Fix: 2.3.8+
Fix from $2,300 2026-05-04
Nginx Ui MEDIUM 6.5
CVE-2026-42223

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, the GetSettings API handler (api/settings/settings.go:24-65) seria…

Fix: 2.3.8+
Fix from $1,600 2026-05-04
Nginx Ui MEDIUM 6.5
CVE-2026-42220

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, an authenticated user can call GET /api/settings and retrieve sens…

Fix: 2.3.8+
Fix from $1,600 2026-05-04
Nginx Ui HIGH 8.1
CVE-2026-34403

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.5, all WebSocket endpoints in nginx-ui use a gorilla/websocket Upgrad…

Fix: 2.3.5+
Fix from $1,950 2026-04-20
Nginx Ui HIGH 8.1
CVE-2026-33031

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, a user who was disabled by an administrator can use previously iss…

Fix: 2.3.4+
Fix from $1,950 2026-04-20
Nginx Ui CRITICAL 9.1
CVE-2026-33026

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, the nginx-ui backup restore mechanism allows attackers to tamper w…

Fix: 2.3.4+
Fix from $2,300 2026-03-30
Nginx Ui CRITICAL 9.9
CVE-2026-33030

Nginx UI is a web user interface for the Nginx web server. In versions 2.3.3 and prior, Nginx-UI contains an Insecure Direct Object Reference (IDOR) …

Fix: after 2.3.3
Fix from $2,300 2026-03-30
Nginx Ui CRITICAL 9.8
CVE-2026-33032EPSS 38%

Nginx UI is a web user interface for the Nginx web server. In versions 2.3.5 and prior, the nginx-ui MCP (Model Context Protocol) integration exposes…

Fix: after 2.3.5
Fix from $2,300 2026-03-30
Nginx Ui MEDIUM 6.5
CVE-2026-33029

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, an input validation vulnerability in the logrotate configuration a…

Fix: 2.3.4+
Fix from $1,600 2026-03-30
Nginx Ui MEDIUM 6.5
CVE-2026-33027

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, the nginx-ui configuration improperly handles URL-encoded traversa…

Fix: 2.3.4+
Fix from $1,600 2026-03-30
Nginx Ui CRITICAL 9.8
CVE-2026-27944EPSS 22%

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.3, the /api/backup endpoint is accessible without authentication and …

Fix: 2.3.3+
Fix from $2,300 2026-03-05
Nginx Ui CRITICAL 9.8
CVE-2024-49368EPSS 27%

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.0.0-beta.36, when Nginx UI configures logrotate, it does not verify the…

Fix: after 1.9.9-4
Fix from $2,300 2024-10-21
Nginx Ui HIGH 7.5
CVE-2024-49366

Nginx UI is a web user interface for the Nginx web server. Nginx UI v2.0.0-beta.35 and earlier gets the value from the json field without verificatio…

Fix: after 1.9.9-4
Fix from $1,950 2024-10-21
Nginx Ui HIGH 7.5
CVE-2024-49367

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.0.0-beta.36, the log path of nginxui is controllable. This issue can be…

Fix: after 1.9.9-4
Fix from $1,950 2024-10-21
Nginx Ui HIGH 8.8
CVE-2024-23828

Nginx-UI is a web interface to manage Nginx configurations. It is vulnerable to an authenticated arbitrary command execution via CRLF attack when cha…

Fix: 2.0.0+
Fix from $1,950 2024-01-29
Nginx Ui CRITICAL 9.8
CVE-2024-23827

Nginx-UI is a web interface to manage Nginx configurations. The Import Certificate feature allows arbitrary write into the system. The feature does n…

Mitigation only
Fix from $2,300 2024-01-29
Nginx Ui HIGH 8.8
CVE-2024-22198

Nginx-UI is a web interface to manage Nginx configurations. It is vulnerable to arbitrary command execution by abusing the configuration settings. Th…

Fix: 2.0.0+
Fix from $1,950 2024-01-11
Nginx Ui MEDIUM 6.5
CVE-2024-22196

Nginx-UI is an online statistics for Server Indicators​​ Monitor CPU usage, memory usage, load average, and disk usage in real-time. This issue may l…

Fix: 2.0.0+
Fix from $1,600 2024-01-11
Nginx Ui HIGH 8.8
CVE-2024-22197

Nginx-ui is online statistics for Server Indicators​​ Monitor CPU usage, memory usage, load average, and disk usage in real-time. The `Home > Prefere…

Fix: 2.0.0+
Fix from $1,950 2024-01-11