Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, the self-upgrade mechanism validates a downloaded binary only with a same-origin digest obtained from the same upgrade mirror. A compromised mirror or network attacker able to alter both responses can supply a malicious executable and matching digest. An operator-triggered upgrade is required, and the application installs and runs the attacker-controlled code in the Nginx UI process context on the next upgrade. This issue is fixed in version 2.5.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Warning: Critical Authenticated Remote Code Execution in #NginxUI. CVE-2026-107806 CVSS: 9.4, CVE-2026-107812 CVSS: 7.5. These flaws can lead to code execution, cross node impersonation and configuration tampering in versions before 2.5.0 #Patch #Patch #Patch