CVE-2026-33032: severe nginx-ui bug grants unauthenticated server access
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-33032 | Unauthenticated MCP Endpoint Access in Nginx UI Enables Full Nginx Server Takeover | 9.8 | 35% | PoC |
From the original article
2 min read at securityaffairs.com
An actively exploited critical nginx-ui flaw (CVE-2026-33032) lets attackers bypass authentication and take full control of Nginx servers. A critical vulnerability in nginx-ui, tracked as CVE-2026-33032 (CVSS score of 9. 8), is being actively exploited, allowing attackers to bypass authentication and fully take over Nginx servers.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.