0
Vendor security profile
0xJacky
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs10
Critical1
CISA KEV0
Public exploit3
Patch rate%0
Avg. CVSS8.1
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
0
10
CVE KEV
CVE severity distribution
10toplam CVE
Critical1 (10%)
High8 (80%)
Medium1 (10%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%30
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
10Unknown
Latest vulnerabilities
8.8
CVE-2026-107813
Nginx UI: Incomplete fix of CVE-2026-84315 - the api/cluster router was not - wrapped in RequireSecureSession, so those sensitive mutations run without OTP step-up
0
Patch status unknownEPSS %0
7.5
CVE-2026-107812
Nginx UI: Self-upgrade runs an unsigned binary verified only by a same-origin digest → RCE via a compromised mirror or MITM
0
Patch status unknownEPSS %0
8.8
CVE-2026-107811
0xJacky/nginx-ui /api/nodes Leaks Cluster Node Tokens and Allows Cross-Node Impersonation as initUser
0
Patch status unknownEPSS %0
8.1
CVE-2026-107810
Nginx UI: Backup restore follows crafted symlinks into the live Nginx configuration path before restore flags are applied
0
Patch status unknownEPSS %0
8.8
CVE-2026-107809
Nginx-UI AuthRequired token cookie fallback enables CSRF against management APIs
0
Patch status unknownEPSS %0
8.1
CVE-2026-107808
Nginx UI: Authentication bypass: password login does not enforce a passkey-only second factor (2FA bypass)
0
Patch status unknownEPSS %0
8.8
CVE-2026-107807
Nginx UI: Node Secret Credential Exposure via URL Query Parameter
0
Patch status unknownEPSS %0
9.4
CVE-2026-107806
Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config Overwrite
0
Patch status unknownEPSS %0
7.5
CVE-2026-107805
Nginx UI: Unauthenticated signed-request body staging can exhaust temporary storage
0
Patch status unknownEPSS %0
5.3
CVE-2026-107804
Nginx UI: Bundled reverse proxy can bypass IP allowlists and enable shared login lockout
0
Patch status unknownEPSS %0