Package impact
GO / github.com/0xJacky/nginx-ui
| CVE | Severity | CVSS | Risk | Flags | OS | Vendor | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-42238 | critical | 9.8 | 9.8 | 24d ago | Nginx-UI is Vulnerable to Unauthenticated Remote Code Execution via Backup Restore | |||
| CVE-2026-42222 | critical | 9.8 | 9.8 | 24d ago | Nginx-UI: Unauthenticated first-boot instance claim via POST /api/install allows remote bootstrap takeover | |||
| CVE-2026-42223 | medium | 6.5 | 6.5 | 24d ago | Nginx-UI Settings API Exposes Protected Secrets |