Improper input validation in 0xjacky Nginx-ui
CVE-2026-33029
Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, an input validation vulnerability in the logrotate configuration allows an authenticated user to cause a complete Denial of Service (DoS). By submitting a n…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.001 (21.3th percentile) — read the EPSS interpretation.
Affected products
- 0xjacky Nginx-ui — versions < 2.3.4
Weakness classification (CWE)
References
- https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-cp8r-8jvw-v3qg (x_refsource_CONFIRM)
- https://github.com/0xJacky/nginx-ui/releases/tag/v2.3.4 (x_refsource_MISC)