Known vulnerabilities in nginx-ui 2.4.2

Vendor: Nginx UI
Software: nginx-ui
Version: 2.4.2
Software CPE: cpe:2.3:a:nginxui:nginx-ui:*:*:*:*:*:*:*:*
Total vulnerabilities: 17
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting nginx-ui version 2.4.2 nginx-ui 2.4.2 is affected by 17 vulnerabilities: 3 high, 10 medium, 4 low Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU142602 - Missing Authorization
CWE-862 Low
No
No
2.5.7 14.08.2026 SB20260814130
#VU142601 - Information Exposure Through Query Strings in GET Request
CWE-598 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142600 - Improper Access Control
CWE-284 Low
No
No
2.5.0 14.08.2026 SB20260814129
#VU142599 - Improper Verification of Cryptographic Signature
CWE-347 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142598 - Improper Link Resolution Before File Access ('Link Following')
CWE-59 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142597 - Information Exposure Through Query Strings in GET Request
CWE-598 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142596 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-78 Low
No
No
2.5.0 14.08.2026 SB20260814129
#VU142595 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-78 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142594 - Improper Control of Generation of Code ('Code Injection')
CWE-94 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142593 - Improper Authentication
CWE-287 High
No
No
2.5.0 14.08.2026 SB20260814129
#VU142592 - Download of Code Without Integrity Check
CWE-494 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142590 - Exposure of sensitive information to an unauthorized actor
CWE-200 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142591 - Missing Authorization
CWE-862 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142589 - Improper Link Resolution Before File Access ('Link Following')
CWE-59 Low
No
No
2.5.0 14.08.2026 SB20260814129
#VU142588 - Missing Authorization
CWE-862 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142587 - Cross-Site Request Forgery (CSRF)
CWE-352 High
No
No
2.5.0 14.08.2026 SB20260814129
#VU142586 - Improper Access Control
CWE-284 High
No
No
2.5.0 14.08.2026 SB20260814129