Login Request a demo
NU
Product
Nginx UI
by Nginxui · last CVE Oct 9, 2026
33
CVEs
0
On KEV
9.9
Max CVSS
9
New 30D
Vulnerabilities33In the news1Timeline
Severity mix
Critical 11High 17Medium 5Low 0
Severity
All severities33Critical11High17Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Nginx UI to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-42223
6.5
0%
May 4
nginx-ui: Settings API Exposes Protected Secrets
Affected: before 2.3.8
CVE-2026-42220
6.5
0%
May 4
nginx-ui: Authenticated settings disclosure exposes node.secret and enables trusted-node authentication abuse, backup exfiltration, and restore-based nginx-ui state rollback
Affected: before 2.3.8
CVE-2026-33027
6.5
0%
Mar 30
Nginx UI: Improper Path Validation Allows Recursive Deletion of the Nginx Configuration Directory
Affected: before 2.3.4
CVE-2026-33029
6.5
1%
Mar 30
Nginx UI: DoS via Negative Integer Input in Logrotate Interval
Affected: before 2.3.4
CVE-2024-22196
6.5
1%
Jan 11
Authenticated (user role) SQL injection in `OrderAndPaginate` (GHSL-2023-270)
Affected: before 2.0.0; 2.0.0; 2.0.0; 2.0.0; 2.0.0; 2.0.0; +8 more
Showing 5