Summary
Ein entfernter Angreifer kann mehrere Schwachstellen in nginx-ui ausnutzen, um Administratorrechte zu erlangen, um Sicherheitsmechanismen zu umgehen, um Informationen offenzulegen oder zu manipulieren, sowie um einen Denial of Service herbeizuführen.
Product
nginx-ui ist eine Open-Source-Weboberfläche zur Verwaltung und Konfiguration von Nginx-Webservern.
Vulnerabilities 2
-
High 7.5
Nginx UI: Unauthenticated signed-request body staging can exhaust temporary storage
Nginx UI is a web user interface for the Nginx web server. From 2.5.0 until 2.6.0, the node-signature authentication path performs temporary file staging of an attacker-controlled request body and synchronizes it before validating the body digest and cryptogr…
-
Medium 5.3
Nginx UI: Bundled reverse proxy can bypass IP allowlists and enable shared login lockout
Nginx UI is a web user interface for the Nginx web server. From 2.2.0 until 2.6.0, the bundled reverse proxy does not preserve the external client identity used by Gin because the backend has no trusted proxy configuration. Management requests can be attribut…
Revision history
-
#2
Referenz(en) aufgenommen: CVE-2026-107805, EUVD-2026-95818, CVE-2026-107804, EUVD-2026-95817
-
#1
Initiale Fassung
References
-
GitHub Security Advisory GHSA-94h5-jw58-qqq8 vom 2026-09-29
https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-94h5-jw58-qqq8
-
GitHub Security Advisory GHSA-9h23-53f4-q947 vom 2026-09-29
https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-9h23-53f4-q947
-
GitHub Security Advisory GHSA-gp79-j356-rr7m vom 2026-09-29
https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-gp79-j356-rr7m
-
GitHub Security Advisory GHSA-j3hg-9rp3-5hw9 vom 2026-09-29
https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-j3hg-9rp3-5hw9
-
GitHub Security Advisory GHSA-pw4f-pq6v-x57r vom 2026-09-29
https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-pw4f-pq6v-x57r
-
GitHub Security Advisory GHSA-rg7q-q2cr-372q vom 2026-09-29
https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-rg7q-q2cr-372q
-
GitHub Security Advisory GHSA-x2x3-p8j2-63mx vom 2026-09-29
https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-x2x3-p8j2-63mx
-
GitHub Security Advisory GHSA-xrj8-9g8p-mc7v vom 2026-09-29
https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-xrj8-9g8p-mc7v