Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables Full Nginx Server Takeover
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-27825 | MCP Atlassian: The `confluence_download_attachment` MCP tool accepts a `download_path` parameter that is written to without any directory… | 8.0 | 13% | ||
| CVE-2026-27826 | MCP Atlassian: An unauthenticated attacker who can reach the mcp-atlassian HTTP endpoint can force the server process to make outbound HTTP… | 8.2 | 13% | PoC | |
| CVE-2026-27944 | Unauthenticated Backup Download and Key Disclosure in Nginx UI | 9.8 | 23% | PoC ×2 | |
| CVE-2026-33032 | Unauthenticated MCP Endpoint Access in Nginx UI Enables Full Nginx Server Takeover | 9.8 | 35% | PoC |
From the original article
3 min read at thehackernews.com
A recently disclosed critical security flaw impacting nginx-ui, an open-source, web-based Nginx management tool, has come under active exploitation in the wild. The vulnerability in question is CVE-2026-33032 (CVSS score: 9. 8), an authentication bypass vulnerability that enables threat actors to seize control of the Nginx service.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.