Vulnerability in 0xjacky Nginx-ui

CVE-2026-33026

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, the nginx-ui backup restore mechanism allows attackers to tamper with encrypted backup archives and inject malicious configuration during restoration. This…

EPSS: 0.000 (5.4th percentile) — read the EPSS interpretation.

Affected products

0xjacky Nginx-ui — versions < 2.3.4

Weakness classification (CWE)

References

https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-fhh2-gg7w-gwpq (x_refsource_CONFIRM)
https://github.com/0xJacky/nginx-ui/releases/tag/v2.3.4 (x_refsource_MISC)