Vulnerabilities in 0xJacky
44 resultsCVE-2026-107810HIGHNginx UI: Backup restore follows crafted symlinks into the live Nginx configuration path before restore flags are appliedEPSS 0.4%CVE-2026-107811HIGH0xJacky/nginx-ui /api/nodes Leaks Cluster Node Tokens and Allows Cross-Node Impersonation as initUserEPSS 0.4%CVE-2026-84360HIGHNginx UI: OTP secure-session step-up can be bypassed via MCP configuration toolsEPSS 0.4%CVE-2026-84314HIGHNginx UI: Account Takeover via Missing `RequireSecureSession` on User Management EndpointEPSS 0.4%CVE-2026-107808HIGHNginx UI: Authentication bypass: password login does not enforce a passkey-only second factor (2FA bypass)EPSS 0.4%CVE-2026-33027MEDIUMNginx UI: Improper Path Validation Allows Recursive Deletion of the Nginx Configuration DirectoryEPSS 0.4%CVE-2026-42222HIGHnginx-ui: Unauthenticated first-boot instance claim via POST /api/install allows remote bootstrap takeoverEPSS 0.3%CVE-2026-84315HIGHNginx UI OTP secure-session step-up is missing on sensitive mutation routesEPSS 0.3%CVE-2026-33026CRITICALnginx-ui Backup Restore Allows Tampering with Encrypted BackupsEPSS 0.3%CVE-2026-44015HIGHNginx UI: Server-Side Request Forgery (SSRF) via Cluster Proxy Middleware Allows Access to Internal ServicesEPSS 0.3%CVE-2026-107813HIGHNginx UI: Incomplete fix of CVE-2026-84315 - the api/cluster router was not - wrapped in RequireSecureSession, so those sensitive mutations run without OTP step-upEPSS 0.3%CVE-2026-42220MEDIUMnginx-ui: Authenticated settings disclosure exposes node.secret and enables trusted-node authentication abuse, backup exfiltration, and restore-based nginx-ui state rollbackEPSS 0.3%CVE-2026-107807HIGHNginx UI: Node Secret Credential Exposure via URL Query ParameterEPSS 0.3%CVE-2026-42223MEDIUMnginx-ui: Settings API Exposes Protected SecretsEPSS 0.3%CVE-2026-33030HIGHNginx UI: Unencrypted Storage of DNS API Tokens and ACME Private KeysEPSS 0.3%CVE-2026-84319HIGHNginx UI: MCP configuration tools bypass restricted directive validation and allow secondary authenticated users to execute NJS in Nginx worker contextEPSS 0.3%CVE-2026-33031HIGHNginx-UI: Disabled users retain full API access through previously issued bearer tokensEPSS 0.3%CVE-2026-107809HIGHNginx-UI AuthRequired token cookie fallback enables CSRF against management APIsEPSS 0.2%CVE-2026-107804MEDIUMNginx UI: Bundled reverse proxy can bypass IP allowlists and enable shared login lockoutEPSS 0.2%CVE-2026-84321MEDIUMNginx UI: Standalone short tokens survive administrative revocation in cache and authenticate again after account re-enableEPSS 0.2%