Vulnerabilities
Nginx-UI Config Validator Bypass Enables Directive Injection
A flaw in Nginx-UI allows authenticated users to bypass security controls by splitting directives on single lines, leading to potential code execution.
Read moreNginx-UI
Everything BlueTeam Insider has reported about Nginx-UI: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Nginx UI Auth Bypass Allows JWT-Only Cluster Control in High-Severity CVE-2026-107813
An incomplete patch in Nginx UI allows attackers with valid tokens to manage cluster nodes and restart services without re-authenticating via second factor.
Read more