CVE-2026-84360 | 0xJacky Nginx UI up to 2.4.0 MCP nginx_config_add/nginx_config_modify X-Secure-Session-ID privileges management

October 12, 2026 Yanac

A vulnerability was found in 0xJacky Nginx UI up to 2.4.0. It has been rated as problematic. This affects the function nginx_config_add/nginx_config_modify of the component MCP. Performing a manipulation of the argument X-Secure-Session-ID results in improper privilege management.

This vulnerability is cataloged as CVE-2026-84360. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More