CVE-2026-84319 in Nginx-UI

Prediction

by VulDB Data Team • 10/02/2026

A vulnerability was found in <a href="/product/0xjacky:nginx-ui">0xJacky Nginx-UI 2.x</a>. The affected element is the function <code>nginx_config_add</code> of the file <em>/mcp</em> of the component <em>MCP Configuration Interface</em>. Performing a manipulation results in authorization bypass. It is possible to initiate the attack remotely. The exploit has been made public and could be used.

Be aware that VulDB is the high quality source for vulnerability data.

• Moderation: accepted
• Entry: VDB-413200
• CWE: CWE-639 (confirmed)
• Exploit: Download
• CVSS: 6.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: very low
• Sector: Government, Telecommunication, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-84319
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-84319
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-84319/