Products: 1
Vulnerabilities: 32
Known Exploited: 0
6
Critical Level Threats
22
High Level Threats
4
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-107813
Nginx UI: Incomplete fix of CVE-2026-84315 - the api/cluster router was not - wrapped in RequireSecureSession, so those sensitive mutations run without OTP step-up
Last Modified: Oct 20, 2026
Published: Oct 09, 2026
CVE-2026-107812
Nginx UI: Self-upgrade runs an unsigned binary verified only by a same-origin digest → RCE via a compromised mirror or MITM
Last Modified: Oct 20, 2026
Published: Oct 09, 2026
CVE-2026-107811
0xJacky/nginx-ui /api/nodes Leaks Cluster Node Tokens and Allows Cross-Node Impersonation as initUser
Last Modified: Oct 20, 2026
Published: Oct 09, 2026
CVE-2026-107810
Nginx UI: Backup restore follows crafted symlinks into the live Nginx configuration path before restore flags are applied
Last Modified: Oct 20, 2026
Published: Oct 09, 2026
CVE-2026-107809
Nginx-UI AuthRequired token cookie fallback enables CSRF against management APIs
Last Modified: Oct 20, 2026
Published: Oct 09, 2026
Items Per Page
