CVE-2026-107810

Published 9 October 2026 · tracked since 10 October 2026

Description

Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, internal/backup/restore.go extracts inner archives before applying the restore_nginx and restore_nginx_ui flags and permits symlinks targeting the live Nginx configuration path. An authenticated user who can create an

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-103889 CRITICAL 9.8
• CVE-2026-104021 HIGH 7.2
• CVE-2026-104735 MEDIUM 6.4
• CVE-2026-102401 MEDIUM 6.4
• CVE-2026-96743 MEDIUM 6.4
• CVE-2026-94589 CRITICAL 9.8
• CVE-2026-107645 CRITICAL 9.1
• CVE-2026-104732 CRITICAL 9.8
• CVE-2026-104797 HIGH 8.1
• CVE-2026-104898 MEDIUM 6.8

→ Open the live CVE board · all tools