All vulnerabilities

Servers and applications

CVE-2026-107805

Nginx UI is a web user interface for the Nginx web server. From 2.5.0 until 2.6.0, the node-signature authentication path performs temporary file staging of an attacker-controlled request body and synchronizes it before validating the body digest and cryptographic signature. An unauthenticated remote client that can reach the API and provide syntactically valid signature metadata can consume…

Severity
High 7.5
Published
9 Oct 2026
Last changed
20 Oct 2026
Added to UpHeron
1 Nov 2026
Fixed in
2.6.0
Sources
NVD

Affected software

SoftwareAffected versions
Nginx UIServers and applications · cpe:a:nginxui:nginx_ui
  • From 2.5.0 before 2.6.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2026-107805
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-107805