Vulnerabilities
Nginx UI High-Severity CSRF Flaw Allows Remote Config Changes
A cross-site request forgery vulnerability in Nginx UI versions prior to 2.5.0 allows attackers to modify server configurations and trigger reloads.
Web Server
Everything Threat Times has reported about Web Server: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Nginx UI cluster operations bypass OTP step-up in incomplete CVE-2026-107813 fix
An incomplete security patch in Nginx UI allows attackers with a stolen JWT to manage cluster nodes and restart servers without secondary authentication.