Go/github.com/0xJacky/Nginx-UI CVE-2026-107806: high 7.2
Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config Overwrite
Action: Upgrade github.com/0xJacky/Nginx-UI to 1.9.10-0.20260728074146-a467ed652591 or later.
go get github.com/0xJacky/Nginx-UI@v1.9.10-0.20260728074146-a467ed652591Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.9.10-0.20260421071512-7864e378f5cf | 1.9.10-0.20260728074146-a467ed652591 | - |
Fixed versions
| 1.9.10-0.20260728074146-a467ed652591 |
Sources
- osv: GHSA-p393-cf76-4jmr
- nvd: CVE-2026-107806
- https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-p393-cf76-4jmr
- https://github.com/0xJacky/nginx-ui/commit/a467ed652591fc0cd1b466a1ec751b493faef9f7
- https://github.com/0xJacky/nginx-ui
- https://github.com/0xJacky/nginx-ui/releases/tag/v2.5.0
CVE-2026-107806 · published · modified · JSON