Skip to content
OpenAdvisories
High WID-SEC-2026-1276 5 CVEs

nginx-ui: Mehrere Schwachstellen

Published Apr 26, 2026 · Updated May 4, 2026 · Revision 2 · de-DE

Summary

Ein Angreifer kann mehrere Schwachstellen in nginx-ui ausnutzen, um beliebigen Code mit Root-Rechten auszuführen, sich Administratorrechte zu verschaffen und die vollständige Kontrolle über das System zu erlangen oder vertrauliche Informationen offenzulegen.

Product

nginx-ui ist eine Open-Source-Weboberfläche zur Verwaltung und Konfiguration von Nginx-Webservern.

Vulnerabilities 5

  • Critical 9.0
    CVE-2026-42238

    Unauthenticated Remote Code Execution via Backup Restore in nginx-ui

    Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, nginx-ui exposes a backup restore endpoint (POST /api/restore) that is completely unauthenticated during the first 10 minutes after process startup on any fresh installation. A…

    0xJacky nginx-ui github.com/0xJacky/Nginx-UI Go
  • High 8.1
    CVE-2026-42221 Public exploit Scanner template

    nginx-ui: Unauthenticated First-Run Installer Allows Remote Initial Admin Claim

    Nginx UI is a web user interface for the Nginx web server. From version 2.0.0 to before version 2.3.8, an unauthenticated network attacker can claim the initial administrator account on a fresh nginx-ui instance during the first-run setup window. The public /…

    0xJacky nginx-ui github.com/0xJacky/Nginx-UI Go
  • High 8.1
    CVE-2026-42222

    nginx-ui: Unauthenticated first-boot instance claim via POST /api/install allows remote bootstrap takeover

    Nginx UI is a web user interface for the Nginx web server. In version 2.3.5, an unauthenticated bootstrap takeover exists in nginx-ui during the initial installation window exposed by POST /api/install. At time of publication no public patches are available.

    0xJacky nginx-ui github.com/0xJacky/Nginx-UI Go
  • Medium 6.5
    CVE-2026-42220

    nginx-ui: Authenticated settings disclosure exposes node.secret and enables trusted-node authentication abuse, backup exfiltration, and restore-based nginx-ui state rollback

    Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, an authenticated user can call GET /api/settings and retrieve sensitive configuration values, including node.secret. The same node.secret is accepted by AuthRequired() through …

    0xJacky nginx-ui github.com/0xJacky/Nginx-UI Go
  • Medium 6.5
    CVE-2026-42223

    nginx-ui: Settings API Exposes Protected Secrets

    Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, the GetSettings API handler (api/settings/settings.go:24-65) serializes all settings structs to JSON and returns them to authenticated users. Many sensitive fields are tagged w…

    0xJacky nginx-ui github.com/0xJacky/Nginx-UI Go

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2026-27133, EUVD-2026-27137, EUVD-2026-27141, EUVD-2026-27140, EUVD-2026-27135

  2. #1

    Initiale Fassung

References