Skip to content
Threat Feed
Subscribe

Product

Nginx-UI (< 1.9.10-0.20260703131214-23d1934099b0)

2 briefs RSS
high advisory

Unauthenticated Denial of Service via Temporary File Exhaustion in Nginx UI

An unauthenticated remote attacker can exploit CVE-2026-107805 in Nginx UI by sending malicious requests that trigger premature staging of large, unsigned request bodies, leading to disk space and I/O exhaustion.

Nginx UI +5 denial-of-service webserver availability credential-exposure authentication-bypass cve auth-bypass cve-2026-107813 +2
1r 9t 1c updated
critical threat

Authenticated Remote Code Execution in Nginx-UI via Backup Restoration

An authenticated user can achieve remote code execution in Nginx-UI by uploading a maliciously crafted backup file that overwrites application configuration settings.

exploited Nginx-UI +4 remote-code-execution cve-2026-107806 vulnerability authentication-bypass cve-2026-107808 web-application n8n csrf +8
2r 4t 1c updated