CVE-2026-107809 | 0xJacky Nginx UI up to 2.4.x Authentication /api/configs AuthRequired cross-site request forgery

October 9, 2026 Yanac

A vulnerability categorized as problematic has been discovered in 0xJacky Nginx UI up to 2.4.x. Impacted is the function AuthRequired of the file /api/configs of the component Authentication. Executing a manipulation can lead to cross-site request forgery.

This vulnerability appears as CVE-2026-107809. The attack may be performed from remote. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More