Known vulnerabilities in nginx-ui 2.1.12

Vendor: Nginx UI
Software: nginx-ui
Version: 2.1.12
Software CPE: cpe:2.3:a:nginxui:nginx-ui:*:*:*:*:*:*:*:*
Total vulnerabilities: 35
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting nginx-ui version 2.1.12 nginx-ui 2.1.12 is affected by 35 vulnerabilities: 7 high, 17 medium, 11 low Critical High Medium Low

Vulnerabilities (35)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU142601 - Information Exposure Through Query Strings in GET Request
CWE-598 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142600 - Improper Access Control
CWE-284 Low
No
No
2.5.0 14.08.2026 SB20260814129
#VU142599 - Improper Verification of Cryptographic Signature
CWE-347 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142598 - Improper Link Resolution Before File Access ('Link Following')
CWE-59 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142597 - Information Exposure Through Query Strings in GET Request
CWE-598 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142596 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-78 Low
No
No
2.5.0 14.08.2026 SB20260814129
#VU142595 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-78 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142593 - Improper Authentication
CWE-287 High
No
No
2.5.0 14.08.2026 SB20260814129
#VU142592 - Download of Code Without Integrity Check
CWE-494 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142590 - Exposure of sensitive information to an unauthorized actor
CWE-200 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142591 - Missing Authorization
CWE-862 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142589 - Improper Link Resolution Before File Access ('Link Following')
CWE-59 Low
No
No
2.5.0 14.08.2026 SB20260814129
#VU142588 - Missing Authorization
CWE-862 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142587 - Cross-Site Request Forgery (CSRF)
CWE-352 High
No
No
2.5.0 14.08.2026 SB20260814129
#VU142586 - Improper Access Control
CWE-284 High
No
No
2.5.0 14.08.2026 SB20260814129
#VU142585 - Improper Authorization
CWE-285 Medium
No
No
2.3.9 14.08.2026 SB20260814128
#VU142584 - Authentication Bypass Using an Alternate Path or Channel
CWE-288 Medium
No
No
2.4.1 14.08.2026 SB20260814127
#VU142583 - Insufficient Session Expiration
CWE-613 Low
No
No
2.4.1 14.08.2026 SB20260814127
#VU142582 - Improper Authentication
CWE-287 Medium
No
No
2.3.10 14.08.2026 SB20260814126
#VU142581 - Cross-Site Request Forgery (CSRF)
CWE-352 Medium
No
No
2.3.10 14.08.2026 SB20260814126


Showing elements 1 - 20 out of 35