Servers and applications
CVE-2026-107805
Nginx UI is a web user interface for the Nginx web server. From 2.5.0 until 2.6.0, the node-signature authentication path performs temporary file staging of an attacker-controlled request body and synchronizes it before validating the body digest and cryptographic signature. An unauthenticated remote client that can reach the API and provide syntactically valid signature metadata can consume…
- Severity
- High 7.5
- Published
- 9 Oct 2026
- Last changed
- 20 Oct 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 2.6.0
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
Nginx UIServers and applications · cpe:a:nginxui:nginx_ui |
|