CVE-2026-107812 | 0xJacky Nginx UI up to 2.4.x Self-Upgrade cross-domain policy

October 9, 2026 Yanac

A vulnerability was found in 0xJacky Nginx UI up to 2.4.x. It has been declared as problematic. This vulnerability affects unknown code of the component Self-Upgrade. Such manipulation leads to permissive cross-domain policy with untrusted domains.

This vulnerability is documented as CVE-2026-107812. The attack can be executed remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More