Product

Nginx-UI (>= 1.9.10-0.20250506154222-1330888280a2, < 1.9.10-0.20260703131214-23d1934099b0)

1 brief RSS

Authenticated Remote Code Execution in Nginx-UI via Backup Restoration

An authenticated user can achieve remote code execution in Nginx-UI by uploading a maliciously crafted backup file that overwrites application configuration settings.

exploited Nginx-UI +4 remote-code-execution cve-2026-107806 vulnerability authentication-bypass cve-2026-107808 web-application n8n csrf +8

2r 4t 1c updated 1h ago