{"uuid": "3d00cbe6-74b8-4256-9511-000e8b928d99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33032", "type": "exploited", "source": "https://t.me/VulnerabilityNews/41950", "content": "Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables Full Nginx Server Takeover\n\nA recently disclosed critical security flaw impacting nginx-ui, an open-source, web-based Nginx management tool, has come under active exploitation in the\u00a0wild.\nThe vulnerability in question is CVE-2026-33032 (CVSS score: 9.8), an authentication bypass vulnerability that enables threat actors to seize control of the Nginx service. It\u00a0has been codenamed MCPwn by Pluto\u00a0Security.\n\"\nhttps://thehackernews.com/2026/04/critical-nginx-ui-vulnerability-cve.html", "creation_timestamp": "2026-08-19T00:00:08.835032Z"}