Known vulnerabilities in nginx-ui - page 2

Vendor: Nginx UI
Software: nginx-ui
Software CPE: cpe:2.3:a:nginxui:nginx-ui:*:*:*:*:*:*:*:*
Total vulnerabilities: 71
Public exploits: 7
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting nginx-ui nginx-ui is affected by 71 known vulnerabilities: 9 high, 36 medium, 26 low Critical High Medium Low

Vulnerabilities (71)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU142594 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-107806
CWE-94 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142593 - Improper Authentication
CVE-2026-107808
CWE-287 High
No
No
2.5.0 14.08.2026 SB20260814129
#VU142592 - Download of Code Without Integrity Check
CVE-2026-107812
CWE-494 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142590 - Exposure of sensitive information to an unauthorized actor
CVE-2026-107811
CWE-200 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142591 - Missing Authorization
CWE-862 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142589 - Improper Link Resolution Before File Access ('Link Following')
CWE-59 Low
No
No
2.5.0 14.08.2026 SB20260814129
#VU142588 - Missing Authorization
CVE-2026-107813
CWE-862 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142587 - Cross-Site Request Forgery (CSRF)
CVE-2026-107809
CWE-352 High
No
No
2.5.0 14.08.2026 SB20260814129
#VU142586 - Improper Access Control
CWE-284 High
No
No
2.5.0 14.08.2026 SB20260814129
#VU138333 - Missing Authentication for Critical Function
CVE-2026-42222
CWE-306 High
No
No
2.3.6 17.07.2026 SB2026041626
#VU127234 - Server-Side Request Forgery (SSRF)
CVE-2026-44015
CWE-918 Medium
No
No
2.3.5 23.04.2026 SB2026042135
#VU127227 - Authorization Bypass Through User-Controlled Key
CVE-2026-33030
CWE-639 Low
No
No
2.3.4 23.04.2026 SB2026042136
#VU126941 - Improper input validation
CVE-2026-33029
CWE-20 Low
No
No
2.3.4 23.04.2026 SB2026042136
#VU126940 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-33028
CWE-362 Low
No
No
2.3.4 23.04.2026 SB2026042136
#VU126939 - Improper Validation of Integrity Check Value
CVE-2026-33026
CWE-354 Low
No
No
2.3.4 23.04.2026 SB2026042136
#VU126938 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-33027
CWE-22 Low
No
No
2.3.4 23.04.2026 SB2026042136
#VU126645 - Command injection
CVE-2024-22197
CWE-77 Medium
Available
No
2.0.0 beta.9 21.04.2026 SB2024011134
#VU126636 - Improper Access Control
CVE-2026-33031
CWE-284 Medium
Available
No
2.3.4 21.04.2026 SB2026042136
#VU126634 - Origin Validation Error
CVE-2026-34403
CWE-346 High
Available
No
2.3.5 21.04.2026 SB2026042135
#VU126309 - Missing Authentication for Critical Function
CVE-2026-33032
CWE-306 High
Available
No
2.3.6 16.04.2026 SB2026041626


Showing elements 21 - 40 out of 71