{"generated_at":"2026-10-23T14:49:23.039Z","count":1,"incidents":[{"id":"nginx-ui-authenticated-remote-code-execution-via-backup-cve-2026-107806","url":"https://pwned.coffee/i/nginx-ui-authenticated-remote-code-execution-via-backup-cve-2026-107806","title":"Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config Overwrite","summary":"## Summary An authenticated nginx-ui user can call `POST /api/restore`, upload a forged encrypted backup, restore `app.ini`, set nginx command settings such as `TestConfigCmd`, and then trigger command execution with `POST /api/nginx/test`. This was validated on nginx-ui `2.3.11 2(523) 6c86e5a5` in the local Docker container `uozi/nginx-ui:latest`. ##…","severity":"critical","patch_status":"patched","status":"past","exploited":false,"affected":"github.com/0xJacky/Nginx-UI (go)","fixed_versions":["github.com/0xJacky/Nginx-UI 1.9.10-0.20260728074146-a467ed652591"],"ids":["CVE-2026-107806"],"stack":["go","nginx"],"first_seen":"2026-10-09T20:45:02Z","updated_at":"2026-10-09T20:45:02Z"}]}