CVE-2026-33032 exposes nginx-ui to unauthenticated takeover via MCP endpoint, impacting 2,600+ instances with active ...
The vulnerability, with a CVSS score of 9.8, relates to the software’s support for Model Context Protocol (MCP) servers, ...
A critical vulnerability in Nginx UI with Model Context Protocol (MCP) support is now being exploited in the wild for full ...
Attackers can abuse the near-maximum severity flaw in nginx-ui to restart, create, modify, and delete NGINX configuration ...
The GitHub-linked advisory and NVD record show the CVE was published on March 30, while the NVD page lists nginx-ui versions ...
Hackers are exploiting CVE-2026-33032, a critical remote takeover vulnerability in the Nginx UI management tool.
A critical authentication bypass in nginx-ui, a widely used open-source web interface for managing nginx servers, has been ...
Results that may be inaccessible to you are currently showing.
Hide inaccessible results