Known vulnerabilities in nginx-ui - page 3

Vendor: Nginx UI
Software: nginx-ui
Software CPE: cpe:2.3:a:nginxui:nginx-ui:*:*:*:*:*:*:*:*
Total vulnerabilities: 49
Public exploits: 7
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting nginx-ui nginx-ui is affected by 49 known vulnerabilities: 9 high, 24 medium, 16 low Critical High Medium Low

Vulnerabilities (49)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126647 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-22196
CWE-89 Medium
Available
No
2.0.0 beta.9 21.04.2026 SB2024011134
#VU126645 - Command injection
CVE-2024-22197
CWE-77 Medium
Available
No
2.0.0 beta.9 21.04.2026 SB2024011134
#VU126639 - Command injection
CVE-2024-22198
CWE-77 Medium
Available
No
2.0.0 beta.9 21.04.2026 SB2024011134
#VU126309 - Missing Authentication for Critical Function
CVE-2026-33032
CWE-306 High
Available
No
2.3.6 16.04.2026 SB2026041626
#VU127231 - Command injection
CVE-2024-49368
CWE-77 Medium
No
No
2.0.0 21.10.2024 SB2024012801
#VU127230 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-49367
CWE-22 Low
No
No
2.0.0 21.10.2024 SB2024012801
#VU127229 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-49366
CWE-22 Low
No
No
2.0.0 21.10.2024 SB2024012801
#VU127233 - Improper input validation
CVE-2024-23827
CWE-20 Low
No
No
2.0.0 28.01.2024 SB2024012801
#VU127232 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2024-23828
CWE-93 Medium
No
No
2.0.0 28.01.2024 SB2024012801


Showing elements 41 - 60 out of 49