CVE ID :CVE-2026-107807 Published : Oct. 9, 2026, 4:17 p.m. | 1 hour, 12 minutes ago Description :Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, Nginx UI accepts the Node.Secret master credential through the node_secret query parameter in HTTP and WebSocket...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-107807 - Nginx UI: Node Secret Credential Exposure via URL Query Parameter

VERWANDTEARTIKEL

CVE-2026-55797 - Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL

CVE-2026-90983 - OTP Code Exposure in Hayat Hospital's Hayat Mobile

CVE-2026-107813 - Nginx UI: Incomplete fix of CVE-2026-84315 - the api/cluster router was not - wrapped in RequireSecureSession, so those sensitive mutations run without OTP step-up

CVE-2026-107814 - MariaDB: Insecure $HOME in MariaDB rpm packages

CVE-2026-108113 - ILIAS before 9.24, 10.12, and 11.5 Unrestricted File Upload via QTI Import

CVE-2026-107808 - Nginx UI: Authentication bypass: password login does not enforce a passkey-only second factor (2FA bypass)