What happened
Authenticated RCE in nginx-ui via forged backup restore overwriting app.ini.
Affected versions
nginx-ui: >= 2.3.8, < 2.5.0 Fixed: See vendor advisory.
Why it matters
This source correlation may provide earlier visibility while structured CVE metadata is still being updated.
Detection & mitigation
- Review the original advisory and validate affected versions.
- Apply vendor-provided updates or mitigations when available.
Public PoC references
RepositoryAuthorFirst seenReference
SploitusAuthenticated RCE in nginx-ui via forged backup restore overwriting app.ini.murrez2026-10-10T08:17:35Verifiedmurrez/CVE-2026-107806CVE-2026-107806 — nginx-ui 2.3.8–2.4.x auth RCE via forged backup restore (TestConfigCmd). PoCbit PoC: GET /api/backup, tamper app.ini, POST /api/restore, POST /api/nginx/test. check/exploit, batch url|JWT. Fixed 2.5.0. https://pocbit.org/pocs/cve-2026-107806★ 5murrez2026-10-10VerifiedSource timeline
Discovered through SploitusView source ↗
CVE record published by NVDView source ↗
Record history
Record created from the first normalized source observation.
Metadata and source references refreshed.