Known vulnerabilities in nginx-ui - page 3

Vendor: Nginx UI
Software: nginx-ui
Software CPE: cpe:2.3:a:nginxui:nginx-ui:*:*:*:*:*:*:*:*
Total vulnerabilities: 71
Public exploits: 7
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting nginx-ui nginx-ui is affected by 71 known vulnerabilities: 9 high, 36 medium, 26 low Critical High Medium Low

Vulnerabilities (71)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU157110 - Allocation of Resources Without Limits or Throttling
CWE-770 Low
No
No
2.6.0 22.10.2026 SB2026093086
#VU152972 - Resource exhaustion
CVE-2026-107805
CWE-400 Medium
No
No
2.6.0 30.09.2026 SB2026093086
#VU152970 - Origin Validation Error
CVE-2026-107804
CWE-346 Medium
No
No
2.6.0 30.09.2026 SB2026093086
#VU152971 - Origin Validation Error
CWE-346 Medium
No
No
2.6.0 30.09.2026 SB2026093086
#VU142601 - Information Exposure Through Query Strings in GET Request
CVE-2026-107807
CWE-598 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142600 - Improper Access Control
CWE-284 Low
No
No
2.5.0 14.08.2026 SB20260814129
#VU142599 - Improper Verification of Cryptographic Signature
CWE-347 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142598 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-107810
CWE-59 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142597 - Information Exposure Through Query Strings in GET Request
CWE-598 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142596 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-78 Low
No
No
2.5.0 14.08.2026 SB20260814129
#VU142595 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-78 Medium
No
No
2.5.0 14.08.2026 SB20260814129
#VU142585 - Improper Authorization
CVE-2026-84314
CWE-285 Medium
No
No
2.3.9 14.08.2026 SB20260814128
#VU142584 - Authentication Bypass Using an Alternate Path or Channel
CVE-2026-84360
CWE-288 Medium
No
No
2.4.1 14.08.2026 SB20260814127
#VU142583 - Insufficient Session Expiration
CVE-2026-84321
CWE-613 Low
No
No
2.4.1 14.08.2026 SB20260814127
#VU142582 - Improper Authentication
CVE-2026-84313
CWE-287 Medium
No
No
2.3.10 14.08.2026 SB20260814126
#VU142581 - Cross-Site Request Forgery (CSRF)
CVE-2026-84312
CWE-352 Medium
No
No
2.3.10 14.08.2026 SB20260814126
#VU142580 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-84320
CWE-22 Low
No
No
2.3.11 14.08.2026 SB2026071789
#VU138337 - Missing Authorization
CVE-2026-84315
CWE-862 Medium
No
No
2.3.11 17.07.2026 SB2026071789
#VU138336 - Improper input validation
CVE-2026-84317
CWE-20 Medium
No
No
2.4.0 17.07.2026 SB2026071788
#VU138335 - Improper input validation
CVE-2026-84316
CWE-20 Medium
No
No
2.4.0 17.07.2026 SB2026071788


Showing elements 41 - 60 out of 71