ИнструментыУязвимости БДУБлоклистыРасширениеУтилитыБлогAPIМониторинг
Главная → Уязвимости → CVE-2026-33026
9.1критическая

CVE-2026-33026

Описание

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, the nginx-ui backup restore mechanism allows attackers to tamper with encrypted backup archives and inject malicious configuration during restoration. This issue has been patched in version 2.3.4.

Затрагиваемое ПО
Nginxui Nginx ui
CVSS
Балл9.1 — критическая
ВекторCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Источники
https://github.com/0xJacky/nginx-ui/releases/tag/v2.3.4https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-fhh2-gg7w-gwpqhttps://github.com/0xJacky/nginx-ui/security/advisories/GHSA-fhh2-gg7w-gwpq