Skip to content
Threat Feed
Subscribe

Product

Nginx UI (2.5.0-2.5.x)

1 brief RSS
high advisory

Unauthenticated Denial of Service via Temporary File Exhaustion in Nginx UI

An unauthenticated remote attacker can exploit CVE-2026-107805 in Nginx UI by sending malicious requests that trigger premature staging of large, unsigned request bodies, leading to disk space and I/O exhaustion.

Nginx UI +3 denial-of-service webserver availability credential-exposure authentication-bypass cve
5t 1c