← Database

CVE-2026-33026

CRITICAL CVSS: 9.1 Published: 2026-03-30 Modified: 2026-06-17

Description

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, the nginx-ui backup restore mechanism allows attackers to tamper with encrypted backup archives and inject malicious configuration during restoration. This issue has been patched in version 2.3.4.

Affected Platforms

Nginxui Nginx Ui

Weakness Type

CWE-312, CWE-347, CWE-354

References