Go/github.com/0xJacky/Nginx-UI CVE-2026-107812: high 7.5

Nginx UI: Self-upgrade runs an unsigned binary verified only by a same-origin digest → RCE via a compromised mirror or MITM

Action: Upgrade github.com/0xJacky/Nginx-UI to 1.9.10-0.20260728114330-580585516dd8 or later.

go get github.com/0xJacky/Nginx-UI@v1.9.10-0.20260728114330-580585516dd8

Affected

Fixed versions

Sources

• osv: GHSA-662p-52hx-cmh2
• https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-662p-52hx-cmh2
• https://github.com/0xJacky/nginx-ui/commit/580585516dd87a8b176bcdac258db70c3b64b7ec
• https://github.com/0xJacky/nginx-ui
• https://github.com/0xJacky/nginx-ui/releases/tag/v2.5.0

CVE-2026-107812 · published 2026-10-09T17:08:21Z · modified 2026-10-19T21:40:58.486568803Z · JSON