Mmastodon TechnologyCybersecurity first seen 6 h ago, last 6 h ago, peak #10

High-severity vulnerability disclosed in Nginx UI

Original: 🟠 CVE-2026-107809 - High (8.8) Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, AuthRe

A high-severity flaw, CVE-2026-107809 rated 8.8, has been disclosed in Nginx UI, the web interface for the Nginx server. Versions 2.0.0 through before 2.5.0 accept a browser-managed token cookie as an API credential after the front end stores the JWT there, leaving management endpoints exposed. Security communities are sharing the advisory and urging users to update to 2.5.0 or later.

Why now: Administrators are racing to patch servers against a newly disclosed high-severity vulnerability in a widely used Nginx management tool.

Nginx UINginxCVE-2026-107809

Open on mastodon →

Evidence

• 🟠 CVE-2026-107809 - High (8.8) Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, AuthRequired accepts a browser-managed token cookie as an API credential after the front end stores the JWT in that cookie. Because management endpoints do not… · thehackerwire

API: https://socialmediatrends-api.osmike.com/v1/trends/1649428