CVE-2026-84316 - Nginx UI: nginx config directive denylist (ValidateConfigFile) is bypassable via same-line ";" separation → authenticated directive injection (RCE on the official image)
CVE ID :CVE-2026-84316 Published : Oct. 12, 2026, 9:17 p.m. | 14 minutes ago Description :Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, config.ValidateConfigDirectives splits configuration by newline and checks only the first directive token on each line even...