CVE-2026-84319 | 0xJacky Nginx-UI 2.x MCP Configuration Interface /mcp nginx_config_add authorization (GHSA-5r62-gj48-897x)

October 2, 2026 Yanac

A vulnerability has been found in 0xJacky Nginx-UI 2.x and classified as critical. The affected element is the function nginx_config_add of the file /mcp of the component MCP Configuration Interface. Performing a manipulation results in authorization bypass.

This vulnerability is cataloged as CVE-2026-84319. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.VulDB Recent EntriesRead More