Products: 1
Vulnerabilities: 36
Known Exploited: 0
4
Critical Level Threats
24
High Level Threats
7
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-84312
Nginx UI: Casdoor SSO callback uses a constant `state` parameter (login CSRF)
Last Modified: Oct 14, 2026
Published: Oct 12, 2026
CVE-2026-84360
Nginx UI: OTP secure-session step-up can be bypassed via MCP configuration tools
Last Modified: Oct 13, 2026
Published: Oct 12, 2026
CVE-2026-84316
Nginx UI: nginx config directive denylist (ValidateConfigFile) is bypassable via same-line ";" separation → authenticated directive injection (RCE on the official image)
Last Modified: Oct 13, 2026
Published: Oct 12, 2026
CVE-2026-84319
Nginx UI: MCP configuration tools bypass restricted directive validation and allow secondary authenticated users to execute NJS in Nginx worker context
Last Modified: Oct 13, 2026
Published: Oct 12, 2026
CVE-2026-84317
Nginx UI: MCP nginx_config_add skips config directive validation → authenticated nginx directive injection (RCE on the official image)
Last Modified: Oct 13, 2026
Published: Oct 12, 2026
Items Per Page
