{"schema_version":1,"title":"Nginx-Ui vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 6 vulnerabilities in Nginx-Ui: 0 in the last 7 days and 6 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-84312, was published on 12 October 2026. 4 vulnerabilities in the last four weeks, up 100% on the four before (2).","url":"https://junglewise.ai/threats/technologies/x-nginx-ui","json_url":"https://junglewise.ai/threats/technologies/x-nginx-ui.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/x-nginx-ui","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":6,"all_time":6,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":6,"last_365_days":6},"latest":[{"cve":"CVE-2026-84312","cvss":7.1,"epss":0.0018,"slug":"cve-2026-84312-nginx-ui-casdoor-sso-callback-uses-a-constant-state-parameter","title":"Nginx UI Casdoor SSO login CSRF via constant state parameter","severity":"high","exploited":false,"published_at":"2026-10-12T22:17:05.263+00:00","url":"https://junglewise.ai/threats/cve-2026-84312-nginx-ui-casdoor-sso-callback-uses-a-constant-state-parameter"},{"cve":"CVE-2026-84318","cvss":8.8,"epss":0.0062,"slug":"cve-2026-84318-nginx-ui-mcp-nginx-config-add-bypasses-directive-validation","title":"nginx-ui MCP nginx_config_add directive validation bypass","severity":"high","exploited":false,"published_at":"2026-10-12T21:17:22.36+00:00","url":"https://junglewise.ai/threats/cve-2026-84318-nginx-ui-mcp-nginx-config-add-bypasses-directive-validation"},{"cve":"CVE-2026-84316","cvss":8.8,"epss":0.004,"slug":"cve-2026-84316-nginx-ui-nginx-config-directive-denylist-validateconfigfile-is","title":"Nginx UI authenticated directive injection via ValidateConfigFile bypass","severity":"high","exploited":false,"published_at":"2026-10-12T21:17:22.067+00:00","url":"https://junglewise.ai/threats/cve-2026-84316-nginx-ui-nginx-config-directive-denylist-validateconfigfile-is"},{"cve":"CVE-2026-84314","cvss":4,"epss":0.0033,"slug":"cve-2026-84314-nginx-ui-account-takeover-via-missing-requiresecuresession-on","title":"nginx-ui account takeover via missing 2FA on user password change","severity":"high","exploited":false,"published_at":"2026-10-12T21:17:21.753+00:00","url":"https://junglewise.ai/threats/cve-2026-84314-nginx-ui-account-takeover-via-missing-requiresecuresession-on"},{"cve":"CVE-2026-107809","cvss":8.8,"epss":0.0019,"slug":"cve-2026-107809-nginx-ui-authrequired-token-cookie-fallback-enables-csrf-against","title":"Nginx-UI cross-site request forgery via auth cookie fallback","severity":"high","exploited":false,"published_at":"2026-10-09T16:17:25.387+00:00","url":"https://junglewise.ai/threats/cve-2026-107809-nginx-ui-authrequired-token-cookie-fallback-enables-csrf-against"},{"cve":"CVE-2026-107808","cvss":8.1,"epss":0.0041,"slug":"cve-2026-107808-nginx-ui-authentication-bypass-password-login-does-not-enforce-a","title":"nginx-ui authentication bypass in password login with passkey-only 2FA","severity":"high","exploited":false,"published_at":"2026-10-09T16:17:25.237+00:00","url":"https://junglewise.ai/threats/cve-2026-107808-nginx-ui-authentication-bypass-password-login-does-not-enforce-a"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":4},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[],"technology":{"hub":true,"name":"Nginx-Ui","slug":"x-nginx-ui","aliases":[],"category":"web-server-management","description":"Web-based management interface for Nginx server configuration and monitoring.","url":"https://junglewise.ai/threats/technologies/x-nginx-ui"},"most_severe":[{"cve":"CVE-2026-84318","cvss":8.8,"epss":0.0062,"slug":"cve-2026-84318-nginx-ui-mcp-nginx-config-add-bypasses-directive-validation","title":"nginx-ui MCP nginx_config_add directive validation bypass","severity":"high","exploited":false,"published_at":"2026-10-12T21:17:22.36+00:00","url":"https://junglewise.ai/threats/cve-2026-84318-nginx-ui-mcp-nginx-config-add-bypasses-directive-validation"},{"cve":"CVE-2026-84316","cvss":8.8,"epss":0.004,"slug":"cve-2026-84316-nginx-ui-nginx-config-directive-denylist-validateconfigfile-is","title":"Nginx UI authenticated directive injection via ValidateConfigFile bypass","severity":"high","exploited":false,"published_at":"2026-10-12T21:17:22.067+00:00","url":"https://junglewise.ai/threats/cve-2026-84316-nginx-ui-nginx-config-directive-denylist-validateconfigfile-is"},{"cve":"CVE-2026-107809","cvss":8.8,"epss":0.0019,"slug":"cve-2026-107809-nginx-ui-authrequired-token-cookie-fallback-enables-csrf-against","title":"Nginx-UI cross-site request forgery via auth cookie fallback","severity":"high","exploited":false,"published_at":"2026-10-09T16:17:25.387+00:00","url":"https://junglewise.ai/threats/cve-2026-107809-nginx-ui-authrequired-token-cookie-fallback-enables-csrf-against"},{"cve":"CVE-2026-107808","cvss":8.1,"epss":0.0041,"slug":"cve-2026-107808-nginx-ui-authentication-bypass-password-login-does-not-enforce-a","title":"nginx-ui authentication bypass in password login with passkey-only 2FA","severity":"high","exploited":false,"published_at":"2026-10-09T16:17:25.237+00:00","url":"https://junglewise.ai/threats/cve-2026-107808-nginx-ui-authentication-bypass-password-login-does-not-enforce-a"},{"cve":"CVE-2026-84312","cvss":7.1,"epss":0.0018,"slug":"cve-2026-84312-nginx-ui-casdoor-sso-callback-uses-a-constant-state-parameter","title":"Nginx UI Casdoor SSO login CSRF via constant state parameter","severity":"high","exploited":false,"published_at":"2026-10-12T22:17:05.263+00:00","url":"https://junglewise.ai/threats/cve-2026-84312-nginx-ui-casdoor-sso-callback-uses-a-constant-state-parameter"},{"cve":"CVE-2026-84314","cvss":4,"epss":0.0033,"slug":"cve-2026-84314-nginx-ui-account-takeover-via-missing-requiresecuresession-on","title":"nginx-ui account takeover via missing 2FA on user password change","severity":"high","exploited":false,"published_at":"2026-10-12T21:17:21.753+00:00","url":"https://junglewise.ai/threats/cve-2026-84314-nginx-ui-account-takeover-via-missing-requiresecuresession-on"}],"generated_at":"2026-11-12T03:07:00.164048+00:00"}