Nginx-UI
Go2 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting Nginx-UIpage 1 of 1
- CVE-2026-84312HIGHCVSS 7.1EG 7.12026-10-12
Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, GetCasdoorUri uses the configured Casdoor application name as a constant OAuth state value and CasdoorCallback does not compare the submitted state with a value bou…
- CVE-2026-84313HIGHCVSS 8.8EG 8.8fixed in 1.9.10-0.20260703131214-23d1934099b02026-10-12
Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, POST /api/otp_enroll and POST /api/finish_passkey_register are registered outside RequireSecureSession and accept a normal authenticated session without verifying t…
Check whether Nginx-UI is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for Nginx-UI CVEs against the assets you own.
Book a Demo →