CVE-2026-33026 in nginx-ui

Resumen (Inglés)

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, the nginx-ui backup restore mechanism allows attackers to tamper with encrypted backup archives and inject malicious configuration during restoration. This issue has been patched in version 2.3.4.

Be aware that VulDB is the high quality source for vulnerability data.

Responsable

GitHub_M

Reservar

2026-03-17

Divulgación

2026-03-30

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
354282	0xJacky nginx-ui cifrado débil	312	No está definido	Arreglo oficial	CVE-2026-33026

Fuentes

• MITRE
• NVD
• CVE Details