https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 20:02:56 +0000 https://vulnerability.circl.lu/sighting/4a905a3e-7dd7-4599-ab94-12c1f708ff1c/export {"uuid": "4a905a3e-7dd7-4599-ab94-12c1f708ff1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107806", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/104854", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-107806\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-10 08:17:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-107806 \u2014 nginx-ui 2.3.8\u20132.4.x auth RCE via forged backup restore (TestConfigCmd). PoCbit PoC: GET /api/backup, tamper app.ini, POST /api/restore, POST /api/nginx/test. check/exploit, batch url|JWT. Fixed 2.5.0. https://pocbit.org/pocs/cve-2026-107806\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-10-10T09:01:39.000000Z"} {"uuid": "4a905a3e-7dd7-4599-ab94-12c1f708ff1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107806", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/104854", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-107806\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-10 08:17:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-107806 \u2014 nginx-ui 2.3.8\u20132.4.x auth RCE via forged backup restore (TestConfigCmd). PoCbit PoC: GET /api/backup, tamper app.ini, POST /api/restore, POST /api/nginx/test. check/exploit, batch url|JWT. Fixed 2.5.0. https://pocbit.org/pocs/cve-2026-107806\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-10-10T09:01:39.000000Z"} https://vulnerability.circl.lu/sighting/4a905a3e-7dd7-4599-ab94-12c1f708ff1c/export Sat, 10 Oct 2026 09:01:39 +0000 https://vulnerability.circl.lu/sighting/46acc67f-e5b7-42f8-9acb-6463f006ab64/export {"uuid": "46acc67f-e5b7-42f8-9acb-6463f006ab64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107806", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mxj3c4vyjt2l", "content": "CVE-2026-107806: Nginx UI by 0xJacky, a web interface for Nginx, has an authenticated remote code execution flaw. A logged-in user can abuse the backup restore endpoint to run commands. Fixed in 2.5.0; a public exploit has been published on GitHub.", "creation_timestamp": "2026-10-10T08:33:03.725777Z"} {"uuid": "46acc67f-e5b7-42f8-9acb-6463f006ab64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107806", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mxj3c4vyjt2l", "content": "CVE-2026-107806: Nginx UI by 0xJacky, a web interface for Nginx, has an authenticated remote code execution flaw. A logged-in user can abuse the backup restore endpoint to run commands. Fixed in 2.5.0; a public exploit has been published on GitHub.", "creation_timestamp": "2026-10-10T08:33:03.725777Z"} https://vulnerability.circl.lu/sighting/46acc67f-e5b7-42f8-9acb-6463f006ab64/export Sat, 10 Oct 2026 08:33:03 +0000 https://vulnerability.circl.lu/sighting/385d7922-08fa-4d9a-af81-3a53afc2c106/export {"uuid": "385d7922-08fa-4d9a-af81-3a53afc2c106", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107806", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxiaudt6i22h", "content": "CVE-2026-107806 - nginx-ui\nIf someone can log into the nginx\u2011ui web interface, they can upload a crafted backup file that overwrites the app\u2019s configuration. This lets them change settings and run\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nginxui #0xjacky #Golang #CVE #infosec", "creation_timestamp": "2026-10-10T00:40:03.994594Z"} {"uuid": "385d7922-08fa-4d9a-af81-3a53afc2c106", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107806", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxiaudt6i22h", "content": "CVE-2026-107806 - nginx-ui\nIf someone can log into the nginx\u2011ui web interface, they can upload a crafted backup file that overwrites the app\u2019s configuration. This lets them change settings and run\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nginxui #0xjacky #Golang #CVE #infosec", "creation_timestamp": "2026-10-10T00:40:03.994594Z"} https://vulnerability.circl.lu/sighting/385d7922-08fa-4d9a-af81-3a53afc2c106/export Sat, 10 Oct 2026 00:40:03 +0000 https://vulnerability.circl.lu/sighting/b8806dc7-428e-4d4e-8442-98f8e53401b8/export {"uuid": "b8806dc7-428e-4d4e-8442-98f8e53401b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107806", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mxhf4sscaw24", "content": "A critical Nginx UI RCE vulnerability (CVE-2026-107806) is publicly disclosed with PoC exploit code. Admins must patch now to prevent system takeover.\n\n#NginxUI #RCE #Vulnerability #CVE2026107806 #CyberSecurity", "creation_timestamp": "2026-10-09T16:23:43.861855Z"} {"uuid": "b8806dc7-428e-4d4e-8442-98f8e53401b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107806", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mxhf4sscaw24", "content": "A critical Nginx UI RCE vulnerability (CVE-2026-107806) is publicly disclosed with PoC exploit code. Admins must patch now to prevent system takeover.\n\n#NginxUI #RCE #Vulnerability #CVE2026107806 #CyberSecurity", "creation_timestamp": "2026-10-09T16:23:43.861855Z"} https://vulnerability.circl.lu/sighting/b8806dc7-428e-4d4e-8442-98f8e53401b8/export Fri, 09 Oct 2026 16:23:43 +0000 https://vulnerability.circl.lu/sighting/a05954ac-c37c-42d4-9ce2-b7e4ae4cf189/export {"uuid": "a05954ac-c37c-42d4-9ce2-b7e4ae4cf189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107806", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxheb76vdy2h", "content": "\ud83d\udea8 CVE-2026-107806 \u2014 CVSS 9.4 CRITICAL\n\nNginx UI is a web user interface for the Nginx web server. From 2.3.8 until 2.5.0, an authenticated adminis...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-107806\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-09T16:08:16.573062Z"} {"uuid": "a05954ac-c37c-42d4-9ce2-b7e4ae4cf189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107806", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxheb76vdy2h", "content": "\ud83d\udea8 CVE-2026-107806 \u2014 CVSS 9.4 CRITICAL\n\nNginx UI is a web user interface for the Nginx web server. From 2.3.8 until 2.5.0, an authenticated adminis...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-107806\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-09T16:08:16.573062Z"} https://vulnerability.circl.lu/sighting/a05954ac-c37c-42d4-9ce2-b7e4ae4cf189/export Fri, 09 Oct 2026 16:08:16 +0000 https://vulnerability.circl.lu/sighting/681a0dd0-15e2-4715-9e64-d30af89522f2/export {"uuid": "681a0dd0-15e2-4715-9e64-d30af89522f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107806", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/aruy3itb2tnxa", "content": "CVE-2026-107806 - Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config Overwrite\nCVE ID : CVE-2026-107806\n \n Published : Oct. 9, 2026, 3 p.m. | 19\u00a0minutes ago\n \n Description : Nginx UI is a web user interface for the Nginx web server. From 2.3.8 until 2....", "creation_timestamp": "2026-10-09T15:58:29.530406Z"} {"uuid": "681a0dd0-15e2-4715-9e64-d30af89522f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107806", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/aruy3itb2tnxa", "content": "CVE-2026-107806 - Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config Overwrite\nCVE ID : CVE-2026-107806\n \n Published : Oct. 9, 2026, 3 p.m. | 19\u00a0minutes ago\n \n Description : Nginx UI is a web user interface for the Nginx web server. From 2.3.8 until 2....", "creation_timestamp": "2026-10-09T15:58:29.530406Z"} https://vulnerability.circl.lu/sighting/681a0dd0-15e2-4715-9e64-d30af89522f2/export Fri, 09 Oct 2026 15:58:29 +0000 https://vulnerability.circl.lu/sighting/6c0a1e67-d628-4eec-bd4c-2e377049ba76/export {"uuid": "6c0a1e67-d628-4eec-bd4c-2e377049ba76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-107806", "type": "published-proof-of-concept", "source": "https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-p393-cf76-4jmr", "content": "", "creation_timestamp": "2026-08-12T02:40:40.000000Z"} {"uuid": "6c0a1e67-d628-4eec-bd4c-2e377049ba76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-107806", "type": "published-proof-of-concept", "source": "https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-p393-cf76-4jmr", "content": "", "creation_timestamp": "2026-08-12T02:40:40.000000Z"} https://vulnerability.circl.lu/sighting/6c0a1e67-d628-4eec-bd4c-2e377049ba76/export Wed, 12 Aug 2026 02:40:40 +0000