CVE-2026-42238

Go/github.com/0xJacky/nginx-ui CVE-2026-42238: critical 9.8

Nginx-UI is Vulnerable to Unauthenticated Remote Code Execution via Backup Restore

Action: Upgrade github.com/0xJacky/nginx-ui to 2.3.8 or later.

go get github.com/0xJacky/nginx-ui@v2.3.8

Affected

Fixed versions

Sources

• osv: GHSA-4pvg-prr3-9cxr
• https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-4pvg-prr3-9cxr
• https://nvd.nist.gov/vuln/detail/CVE-2026-42238
• https://github.com/0xJacky/nginx-ui
• https://github.com/0xJacky/nginx-ui/releases/tag/v2.3.8

CVE-2026-42238 · published 2026-05-06T17:03:43Z · modified 2026-06-25T18:56:08.268429874Z · JSON

Go/github.com/0xJacky/nginx-ui CVE-2026-42238: unknown

Nginx-UI is Vulnerable to Unauthenticated Remote Code Execution via Backup Restore in github.com/0xJacky/nginx-ui

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-5129
• https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-4pvg-prr3-9cxr
• https://nvd.nist.gov/vuln/detail/CVE-2026-42238
• https://github.com/0xJacky/nginx-ui/releases/tag/v2.3.8

CVE-2026-42238 · published 2026-06-25T18:26:48Z · modified 2026-06-25T18:45:23.747462852Z · JSON