Vulners
Lucene search
3 matches found
EUVD-2026-27140
Nginx-UI Settings API Exposes Protected Secrets...
6.5CVSS5.8AI score0.00036EPSS
Exploits1References3
CVE-2026-42223
Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, the GetSettings API handler api/settings/settings.go:24-65 serializes all settings structs to JSON and returns them to authenticated users. Many sensitive fields are tagged with protected:"true" - however, this tag...
6.5CVSS5.7AI score0.00036EPSS
Exploits1References1
CVE-2026-42223
Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, the GetSettings API handler api/settings/settings.go:24-65 serializes all settings structs to JSON and returns them to authenticated users. Many sensitive fields are tagged with protected:"true" - however, this tag...
6.5CVSS0.00036EPSS
Exploits1References2
20