Skip to content
OpenAdvisories

Package · Go

github.com/0xJacky/Nginx-UI

41 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2026-42221 Public exploit

    nginx-ui: Unauthenticated First-Run Installer Allows Remote Initial Admin Claim

    Nginx UI is a web user interface for the Nginx web server. From version 2.0.0 to before version 2.3.8, an unauthenticated network attacker can claim the initial administrator account on a fresh nginx-ui instance during the first-run setup window. The public /…

    0xJacky nginx-ui github.com/0xJacky/Nginx-UI Go
  • High 7.1
    CVE-2024-22198 Public exploit

    Authenticated (user role) arbitrary command execution by modifying `start_cmd` setting (GHSL-2023-268)

    Nginx-UI is a web interface to manage Nginx configurations. It is vulnerable to arbitrary command execution by abusing the configuration settings. The `Home > Preference` page exposes a list of system settings such as `Run Mode`, `Jwt Secret`, `Node Secret` a…

    0xJacky nginx-ui github.com/0xJacky/Nginx-UI Go