News

CVE-2026-33032: severe nginx-ui bug grants unauthenticated server access

  • Pierluigi Paganini--Securityaffairs.com
  • published date: 2026-04-15 18:17:50 UTC

An actively exploited critical nginx-ui flaw (CVE-2026-33032) lets attackers bypass authentication and take full control of Nginx servers. A critical vulnerability in nginx-ui, tracked as CVE-2026-33032 (CVSS score of 9.8), is being actively exploited, allowi…

CVE-2026-33032: severe nginx-ui bug grants unauthenticated server access A critical vulnerability in nginx-ui, tracked as CVE-2026-33032 (CVSS score of 9.8), is being actively exploited, allowing at… [+2383 chars]