Go/github.com/0xJacky/Nginx-UI CVE-2026-44015: high 8.5, EPSS 0.39%

Nginx-UI has Server-Side Request Forgery (SSRF) via Cluster Proxy Middleware that Allows Access to Internal Services

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-wr32-99hh-6f35
• https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-wr32-99hh-6f35
• https://nvd.nist.gov/vuln/detail/CVE-2026-44015
• https://github.com/0xJacky/nginx-ui

CVE-2026-44015 · published 2026-04-29T20:54:54Z · modified 2026-06-25T23:11:21.932251359Z · JSON