CVE-2026-33031
2 advisories.
Go/github.com/0xJacky/Nginx-UI CVE-2026-33031: high 8.1, EPSS 0.39%
Nginx-UI: Disabled users retain full API access through previously issued bearer tokens
Action: Upgrade github.com/0xJacky/Nginx-UI to 1.9.10-0.20260314152518-7b66578adb47 or later.
go get github.com/0xJacky/Nginx-UI@v1.9.10-0.20260314152518-7b66578adb47Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.9.10-0.20260314152518-7b66578adb47 | - |
Fixed versions
| 1.9.10-0.20260314152518-7b66578adb47 |
Sources
- osv: GHSA-x234-x5vq-cc2v
- https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-x234-x5vq-cc2v
- https://nvd.nist.gov/vuln/detail/CVE-2026-33031
- https://github.com/0xJacky/nginx-ui/commit/7b66578adb47bbec839b621a4666495249379174
- https://github.com/0xJacky/nginx-ui
- https://github.com/0xJacky/nginx-ui/releases/tag/v2.3.4
CVE-2026-33031 · published · modified · JSON
Go/github.com/0xJacky/Nginx-UI CVE-2026-33031: unknown, EPSS 0.39%
Nginx-UI: Disabled users retain full API access through previously issued bearer tokens in github.com/0xJacky/Nginx-UI
Action: Upgrade github.com/0xJacky/Nginx-UI to 1.9.10-0.20260314152518-7b66578adb47 or later.
go get github.com/0xJacky/Nginx-UI@v1.9.10-0.20260314152518-7b66578adb47Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.9.10-0.20260314152518-7b66578adb47 | - |
Fixed versions
| 1.9.10-0.20260314152518-7b66578adb47 |
Sources
- osv: GO-2026-5733
- https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-x234-x5vq-cc2v
- https://nvd.nist.gov/vuln/detail/CVE-2026-33031
- https://github.com/0xJacky/nginx-ui/commit/7b66578adb47bbec839b621a4666495249379174
- https://github.com/0xJacky/nginx-ui/releases/tag/v2.3.4
CVE-2026-33031 · published · modified · JSON