Skip to content
OpenAdvisories

Vendor

0xJacky

44 known vulnerabilities.

Products

nginx-ui 44
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.1
    CVE-2026-42221 Public exploit Scanner template

    nginx-ui: Unauthenticated First-Run Installer Allows Remote Initial Admin Claim

    Nginx UI is a web user interface for the Nginx web server. From version 2.0.0 to before version 2.3.8, an unauthenticated network attacker can claim the initial administrator account on a fresh nginx-ui instance during the first-run setup window. The public /…

    0xJacky nginx-ui github.com/0xJacky/Nginx-UI Go
  • High 8.9
    CVE-2024-49368 Public exploit EPSS 28%

    Unchecked logrotate settings lead to arbitrary command execution

    Nginx UI is a web user interface for the Nginx web server. Prior to version 2.0.0-beta.36, when Nginx UI configures logrotate, it does not verify the input and directly passes it to exec.Command, causing arbitrary command execution. Version 2.0.0-beta.36 fixe…

    0xJacky nginx-ui
  • High 7.1
    CVE-2024-22198 Public exploit

    Authenticated (user role) arbitrary command execution by modifying `start_cmd` setting (GHSL-2023-268)

    Nginx-UI is a web interface to manage Nginx configurations. It is vulnerable to arbitrary command execution by abusing the configuration settings. The `Home > Preference` page exposes a list of system settings such as `Run Mode`, `Jwt Secret`, `Node Secret` a…

    0xJacky nginx-ui github.com/0xJacky/Nginx-UI Go