nginx-ui
No nginx-ui CVE is in the CISA KEV catalogue.
Tracked since 8 Mar · latest article Fri 9 Oct · RSS
Exploited, by due date
CSV downloadNo nginx-ui CVE is in the CISA KEV catalogue.
7 articles from 6 outlets since 8 Mar; the latest 16 days ago.
- Article
- First report
Show as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Fri 9 Oct · 18:13 UTC | SecurityOnline | Nginx UI Flaw Lets Authenticated Attackers Take Over Servers |
| Wed 15 Apr · 22:10 UTC | Dark Reading | nginx UI flaw lets attackers hijack NGINX via CVE-2026-33032 |
| Wed 15 Apr · 19:11 UTC | Security Affairs | CVE-2026-33032: severe nginx-ui bug grants unauthenticated server access |
| Wed 15 Apr · 15:10 UTC | SecurityWeek | Nginx UI flaw CVE-2026-33032 exploited, allows server takeover |
| Wed 15 Apr · 14:03 UTC | The Hacker News | nginx UI flaw CVE-2026-33032 exploited, allowing server takeover |
| Wed 15 Apr · 14:03 UTC | Infosecurity | nginx-ui auth bypass CVE-2026-33032 lets attackers control servers |
| Sun 8 Mar · 19:55 UTC | Security Affairs | CVE-2026-27944 Nginx UI allows unauthenticated access to backups |
Who reported 6 outlets, last 12 months
- Security Affairs2
- The Hacker News1
- Dark Reading1
- Infosecurity1
- SecurityWeek1
- SecurityOnline1
- Nginx UI Flaw Lets Authenticated Attackers Take Over ServersSecurityOnline
- nginx UI flaw lets attackers hijack NGINX via CVE-2026-33032Dark Reading
- CVE-2026-33032: severe nginx-ui bug grants unauthenticated server accessSecurity Affairs
- Nginx UI flaw CVE-2026-33032 exploited, allows server takeoverSecurityWeek
- nginx UI flaw CVE-2026-33032 exploited, allowing server takeoverThe Hacker News
- nginx-ui auth bypass CVE-2026-33032 lets attackers control serversInfosecurity
- CVE-2026-27944 Nginx UI allows unauthenticated access to backupsSecurity Affairs
All CVEs in coverage
3How these numbers are made
CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.
CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.
Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.
Product names are grouped by normalised names, with version and edition tails removed.
Fix listed refers to an advisory. Unknown fix status is counted as not listed.