Known vulnerabilities in nginx-ui 2.3.8 - page 2
Vendor:
Nginx UI
Software:
nginx-ui
Version:
2.3.8
Software CPE:
cpe:2.3:a:nginxui:nginx-ui:*:*:*:*:*:*:*:*
Website:
https://nginxui.com/
Total vulnerabilities:
26
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
2.6.2
2.6.3
2.6.1
2.6.0
2.5.10
2.5.9
2.5.8
2.5.7
2.5.6
2.5.5
2.5.4
2.5.3
2.5.2
2.5.1
2.5.0
2.4.3
2.4.2
2.4.1
2.4.0
2.3.11
2.3.10
2.3.9
2.0.0.beta.9
-
2.0.0.beta.8
2.3.8
2.3.7
2.3.6
2.3.5
2.3.4
2.3.3
2.3.2
2.3.1
2.3.0
2.2.1
2.2.0
2.1.17
2.1.16
2.1.15
2.1.14
2.1.13
2.1.12
2.1.11
2.1.10
2.1.9
2.1.8
2.1.7
2.1.6
2.1.5
2.1.4
2.1.3
2.1.2
2.1.1
2.1.0
2.0.2
2.0.1
2.0.0
1.9.9
1.8.4
1.8.3
1.8.2
1.8.1
1.8.0
1.7.9
1.7.8
1.7.7
1.7.6
1.7.5
1.7.4
1.7.3
1.7.2
1.7.1
1.7.0
1.6.8
1.6.7
1.6.6
1.6.5
1.6.3
1.6.2
1.6.1
1.6.0
1.5.2
1.5.1
1.5.0
1.4.2
1.4.1
1.4.0
1.3.2
1.3.1
1.3.0
1.2.2
1.2.1
1.2.0
1.1.0
Vulnerabilities (26)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU142582 - Improper Authentication |
CWE-287 | Medium | 2.3.10 | 14.08.2026 |
SB20260814126 |
||
| #VU142581 - Cross-Site Request Forgery (CSRF) |
CWE-352 | Medium | 2.3.10 | 14.08.2026 |
SB20260814126 |
||
| #VU142580 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') |
CWE-22 | Low | 2.3.11 | 14.08.2026 |
SB2026071789 |
||
| #VU138337 - Missing Authorization |
CWE-862 | Medium | 2.3.11 | 17.07.2026 |
SB2026071789 |
||
| #VU138336 - Improper input validation |
CWE-20 | Medium | 2.4.0 | 17.07.2026 |
SB2026071788 |
||
| #VU138335 - Improper input validation |
CWE-20 | Medium | 2.4.0 | 17.07.2026 |
SB2026071788 |
Showing elements 21 - 40 out of 26