Changes.Watch~ upgrade verdicts ~
Free digest
CriticalPHP2Shell: is your PHP patched?

critical vulnerability

Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config Overwrite

Fix availableCritical · CVSS 9EPSS 0.40%

Published Oct 9, 2026 · updated Oct 9, 2026

What to do

  1. Upgrade to a fixed version: github.com/0xJacky/Nginx-UI 1.9.10-0.20260728074146-a467ed652591.
  2. Redeploy and restart long-running processes so they load the fixed code.

Affected packages

Gogithub.com/0xJacky/Nginx-UI

Vulnerable versions
>= 1.9.10-0.20260421071512-7864e378f5cf, < 1.9.10-0.20260728074146-a467ed652591
Fixed in
1.9.10-0.20260728074146-a467ed652591

Check your project: go list -m all | grep github.com/0xJacky/Nginx-UI

Sources

CWE-94 Improper Control of Generation of Code ('Code Injection')

← All critical vulnerabilities