Skip to content
CVE PROGRAM SOURCE RECORD9.4 Critical

CVE-2026-33026

nginx-ui Backup Restore Allows Tampering with Encrypted Backups

Description

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, the nginx-ui backup restore mechanism allows attackers to tamper with encrypted backup archives and inject malicious configuration during restoration. This issue has been patched in version 2.3.4.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

0xJacky nginx-ui

  • < 2.3.4affected

References