Known vulnerabilities in nginx-ui

Vendor: Nginx UI
Software: nginx-ui
Software CPE: cpe:2.3:a:nginxui:nginx-ui:*:*:*:*:*:*:*:*
Total vulnerabilities: 49
Public exploits: 7
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting nginx-ui nginx-ui is affected by 49 known vulnerabilities: 9 high, 24 medium, 16 low Critical High Medium Low

Vulnerabilities (49)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU142602 - Missing Authorization
CWE-862 Low
No
No
2.5.7 14.08.2026 SB20260814130
#VU142601 - Information Exposure Through Query Strings in GET Request
CWE-598 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142600 - Improper Access Control
CWE-284 Low
No
No
2.5.0 14.08.2026 SB20260814129
#VU142599 - Improper Verification of Cryptographic Signature
CWE-347 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142598 - Improper Link Resolution Before File Access ('Link Following')
CWE-59 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142597 - Information Exposure Through Query Strings in GET Request
CWE-598 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142596 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-78 Low
No
No
2.5.0 14.08.2026 SB20260814129
#VU142595 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-78 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142594 - Improper Control of Generation of Code ('Code Injection')
CWE-94 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142593 - Improper Authentication
CWE-287 High
No
No
2.5.0 14.08.2026 SB20260814129
#VU142592 - Download of Code Without Integrity Check
CWE-494 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142590 - Exposure of sensitive information to an unauthorized actor
CWE-200 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142591 - Missing Authorization
CWE-862 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142589 - Improper Link Resolution Before File Access ('Link Following')
CWE-59 Low
No
No
2.5.0 14.08.2026 SB20260814129
#VU142588 - Missing Authorization
CWE-862 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142587 - Cross-Site Request Forgery (CSRF)
CWE-352 High
No
No
2.5.0 14.08.2026 SB20260814129
#VU142586 - Improper Access Control
CWE-284 High
No
No
2.5.0 14.08.2026 SB20260814129
#VU142585 - Improper Authorization
CWE-285 Medium
No
No
2.3.9 14.08.2026 SB20260814128
#VU142584 - Authentication Bypass Using an Alternate Path or Channel
CWE-288 Medium
No
No
2.4.1 14.08.2026 SB20260814127
#VU142583 - Insufficient Session Expiration
CWE-613 Low
No
No
2.4.1 14.08.2026 SB20260814127


Showing elements 1 - 20 out of 49