CloudMap 漏洞情报库

高危CVE-2026-422212026/09/30

Nginx UI <= 2.3.7 - Unauthenticated Installer Exposure

Nginx UI 2.0.0 to 2.3.8 contains an authentication bypass caused by unauthenticated access to /api/install during first-run setup, letting remote attackers claim the initial admin account, exploit requires attacker to access the service before legitimate operator.

Nginx UIPoC 已收录

CVSS—

严重CVE-2026-330322026/06/25

Nginx UI - Broken Access Control

Network attackers can fully control nginx service, including config modification and service restart, leading to complete service takeover.

Nginx UIPoC 已收录

CVSS—

严重CVE-2026-279442026/06/25

Nginx UI < 2.3.3 - Information Disclosure

Nginx UI < 2.3.3 contains an information disclosure vulnerability caused by unauthenticated access to /api/backup endpoint exposing encryption keys in X-Backup-Security header, letting unauthenticated attackers download and decrypt full system backups.

Nginx UIPoC 已收录

CVSS—

Nginx UI

关联漏洞

Nginx UI <= 2.3.7 - Unauthenticated Installer Exposure

Nginx UI - Broken Access Control

Nginx UI < 2.3.3 - Information Disclosure