CVE-2026-107812
2 advisories.
Go/github.com/0xJacky/Nginx-UI CVE-2026-107812: high 7.5
Nginx UI: Self-upgrade runs an unsigned binary verified only by a same-origin digest → RCE via a compromised mirror or MITM
Action: Upgrade github.com/0xJacky/Nginx-UI to 1.9.10-0.20260728114330-580585516dd8 or later.
go get github.com/0xJacky/Nginx-UI@v1.9.10-0.20260728114330-580585516dd8Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.9.10-0.20250517140552-daee3ac7ade1 | 1.9.10-0.20260728114330-580585516dd8 | - |
Fixed versions
| 1.9.10-0.20260728114330-580585516dd8 |
Sources
- osv: GHSA-662p-52hx-cmh2
- https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-662p-52hx-cmh2
- https://github.com/0xJacky/nginx-ui/commit/580585516dd87a8b176bcdac258db70c3b64b7ec
- https://github.com/0xJacky/nginx-ui
- https://github.com/0xJacky/nginx-ui/releases/tag/v2.5.0
CVE-2026-107812 · published · modified · JSON
Go/github.com/0xJacky/Nginx-UI CVE-2026-107812: high 7.5
Nginx UI: Self-upgrade runs an unsigned binary verified only by a same-origin digest → RCE via a compromised mirror or MITM in github.com/0xJacky/Nginx-UI
Action: Upgrade github.com/0xJacky/Nginx-UI to 1.9.10-0.20260728114330-580585516dd8 or later.
go get github.com/0xJacky/Nginx-UI@v1.9.10-0.20260728114330-580585516dd8Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.9.10-0.20250517140552-daee3ac7ade1 | 1.9.10-0.20260728114330-580585516dd8 | - |
Fixed versions
| 1.9.10-0.20260728114330-580585516dd8 |
Sources
- osv: GO-2026-6705
- nvd: CVE-2026-107812
- https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-662p-52hx-cmh2
- https://github.com/0xJacky/nginx-ui/commit/580585516dd87a8b176bcdac258db70c3b64b7ec
- https://github.com/0xJacky/nginx-ui/releases/tag/v2.5.0
CVE-2026-107812 · published · modified · JSON