Mmastodon TechnologyCybersecurity first seen 2 d ago, last 2 d ago, peak #12

High-severity vulnerability disclosed in Nginx UI

Original: 🟠 CVE-2026-107807 - High (8.8) Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, Nginx

A new vulnerability, CVE-2026-107807, has been assigned a high severity score of 8.8. It affects Nginx UI, a web interface for managing the Nginx web server, in versions 2.0.0 through 2.5.0. The flaw involves the software accepting the Node.Secret master credential via the node_secret query parameter in HTTP and WebSocket authentication paths, rather than requiring it through a more secure channel, exposing credentials to interception. Administrators running affected versions are urged to review the advisory and update promptly.

Why now: System administrators and security researchers are discussing the newly disclosed high-severity flaw so they can assess exposure and patch affected servers.

Nginx UINginxCVE-2026-107807

Open on mastodon →

Evidence

• 🟠 CVE-2026-107807 - High (8.8) Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, Nginx UI accepts the Node.Secret master credential through the node_secret query parameter in HTTP and WebSocket authentication paths instead of requiring the… · thehackerwire

API: https://socialmediatrends-api.osmike.com/v1/trends/1649430