CVE-2026-107810
2 advisories.
Go/github.com/0xJacky/Nginx-UI CVE-2026-107810: high 8.1
Nginx UI: Backup restore follows crafted symlinks into the live Nginx configuration path before restore flags are applied
Action: Upgrade github.com/0xJacky/Nginx-UI to 1.9.10-0.20260728074146-a467ed652591 or later.
go get github.com/0xJacky/Nginx-UI@v1.9.10-0.20260728074146-a467ed652591Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.9.10-0.20250517140552-daee3ac7ade1 | 1.9.10-0.20260728074146-a467ed652591 | - |
Fixed versions
| 1.9.10-0.20260728074146-a467ed652591 |
Sources
- osv: GHSA-p8v3-89rh-jxc7
- https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-p8v3-89rh-jxc7
- https://github.com/0xJacky/nginx-ui/commit/a467ed652591fc0cd1b466a1ec751b493faef9f7
- https://github.com/0xJacky/nginx-ui
- https://github.com/0xJacky/nginx-ui/releases/tag/v2.5.0
CVE-2026-107810 · published · modified · JSON
Go/github.com/0xJacky/Nginx-UI CVE-2026-107810: high 8.1
Nginx UI: Backup restore follows crafted symlinks into the live Nginx configuration path before restore flags are applied in github.com/0xJacky/Nginx-UI
Action: Upgrade github.com/0xJacky/Nginx-UI to 1.9.10-0.20260728074146-a467ed652591 or later.
go get github.com/0xJacky/Nginx-UI@v1.9.10-0.20260728074146-a467ed652591Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.9.10-0.20250517140552-daee3ac7ade1 | 1.9.10-0.20260728074146-a467ed652591 | - |
Fixed versions
| 1.9.10-0.20260728074146-a467ed652591 |
Sources
- osv: GO-2026-6707
- nvd: CVE-2026-107810
- https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-p8v3-89rh-jxc7
- https://github.com/0xJacky/nginx-ui/commit/a467ed652591fc0cd1b466a1ec751b493faef9f7
- https://github.com/0xJacky/nginx-ui/releases/tag/v2.5.0
CVE-2026-107810 · published · modified · JSON