CVE-2026-107811 - 0xJacky/nginx-ui /api/nodes Leaks Cluster Node Tokens and Allows Cross-Node Impersonation as initUser
CVE ID :CVE-2026-107811 Published : Oct. 9, 2026, 4:17 p.m. | 1 hour, 12 minutes ago Description :Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, ordinary authenticated users can access /api/nodes and /api/nodes/:id, whose responses serialize the node token...