Pangolin is my new best friend for remote access.

Attackers are currently exploiting a critical security vulnerability in Nginx. Instances in Germany are also threatened.

“CVE-2026-33032 is a missing authentication bug with a CVSS score of 9.8; as a result of missing authentication controls, an ...

The GitHub-linked advisory and NVD record show the CVE was published on March 30, while the NVD page lists nginx-ui versions ...

A critical vulnerability in Nginx UI with Model Context Protocol (MCP) support is now being exploited in the wild for full ...

Attackers can abuse the near-maximum severity flaw in nginx-ui to restart, create, modify, and delete NGINX configuration ...

The vulnerability, with a CVSS score of 9.8, relates to the software’s support for Model Context Protocol (MCP) servers, ...

A critical Nginx UI vulnerability that allows attackers to take full control of servers has been exploited in the wild.

CVE-2026-33032 exposes nginx-ui to unauthenticated takeover via MCP endpoint, impacting 2,600+ instances with active ...

A critical authentication bypass in nginx-ui, a widely used open-source web interface for managing nginx servers, has been ...