HarborGuard / CVE
Back to search
CRITICALCVE-2026-33026Published Modified CNA GitHub_M

CVE-2026-33026: nginx-ui Backup Restore Allows Tampering with Encrypted Backups

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, the nginx-ui backup restore mechanism allows attackers to tamper with encrypted backup archives and inject malicious configuration during restoration. This issue has been patched in version 2.3.4.

Metrics

CVSS v4.0
9.4
Severity
CRITICAL
Fixed in
—
Affected Products
1
Affected packages
  • 0xJacky / nginx-ui
    < 2.3.4
CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
References