CVE-2026-33026 in nginx-ui

Sumário (Inglês)

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, the nginx-ui backup restore mechanism allows attackers to tamper with encrypted backup archives and inject malicious configuration during restoration. This issue has been patched in version 2.3.4.

Be aware that VulDB is the high quality source for vulnerability data.

Responsável

GitHub_M

Reservar

17/03/2026

Divulgação

30/03/2026

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
354282	0xJacky nginx-ui Encriptação fraca	312	Não definido	Correção oficial	CVE-2026-33026

Fontes

• MITRE
• NVD
• CVE Details