Lucene search
+L

8 matches found

NVD
NVD
•added 2026/10/09 3:17 p.m.•13 views

CVE-2026-107805

Nginx UI is a web user interface for the Nginx web server. From 2.5.0 until 2.6.0, the node-signature authentication path performs temporary file staging of an attacker-controlled request body and synchronizes it before validating the body digest and cryptographic signature. An unauthenticated...

7.5CVSS0.00468EPSS
SaveExploits0References3
Mend
Mend
•added 2026/10/09 2:50 p.m.•10 views

CVE-2026-107805

Nginx UI is a web user interface for the Nginx web server. From 2.5.0 until 2.6.0, the node-signature authentication path performs temporary file staging of an attacker-controlled request body and synchronizes it before validating the body digest and cryptographic signature. An unauthenticated...

8.7CVSS5.8AI score0.00468EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/09 2:50 p.m.•14 views

EUVD-2026-95818

Nginx UI is a web user interface for the Nginx web server. From 2.5.0 until 2.6.0, the node-signature authentication path performs temporary file staging of an attacker-controlled request body and synchronizes it before validating the body digest and cryptographic signature. An unauthenticated...

7.5CVSS5.8AI score0.00468EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/10/09 2:50 p.m.•28 views

CVE-2026-107805 Nginx UI: Unauthenticated signed-request body staging can exhaust temporary storage

Nginx UI is a web user interface for the Nginx web server. From 2.5.0 until 2.6.0, the node-signature authentication path performs temporary file staging of an attacker-controlled request body and synchronizes it before validating the body digest and cryptographic signature. An unauthenticated...

7.5CVSS5.9AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/09 2:50 p.m.•55 views

CVE-2026-107805 Nginx UI: Unauthenticated signed-request body staging can exhaust temporary storage

Nginx UI is a web user interface for the Nginx web server. From 2.5.0 until 2.6.0, the node-signature authentication path performs temporary file staging of an attacker-controlled request body and synchronizes it before validating the body digest and cryptographic signature. An unauthenticated...

7.5CVSS0.00468EPSS
SaveExploits0References3
CVE
CVE
•added 2026/10/09 2:50 p.m.•26 views

CVE-2026-107805

The Nginx UI web user interface is vulnerable to a resource exhaustion flaw in versions 2.5.0 through 2.6.0 . The root cause lies in the node-signature authentication path , which stages an attacker-controlled request body into a temporary file and synchronizes it before validating the cryptograp...

7.5CVSS5.8AI score0.00468EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2026/10/09 12:00 a.m.•12 views

PT-2026-108934

Name of the Vulnerable Software and Affected Versions Nginx UI versions 2.5.0 through 2.5.x Description The node-signature authentication path performs temporary file staging of an attacker-controlled request body and synchronizes it to disk before validating the body digest and cryptographic...

7.5CVSS5.8AI score0.00468EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/09 12:00 a.m.•11 views

CVE-2026-107805: Uncontrolled Resource Consumption

Nginx UI is a web user interface for the Nginx web server. From 2.5.0 until 2.6.0, the node-signature authentication path performs temporary file staging of an attacker-controlled request body and synchronizes it before validating the body digest and cryptographic signature. An unauthenticated...

7.5CVSS5.8AI score0.00468EPSS
SaveExploits0References4
Rows per page
Query Builder