CSO Online

Critical nginx UI tool vulnerability opens web servers to full compromise

The vulnerability, with a CVSS score of 9.8, relates to the software’s support for Model Context Protocol (MCP) servers, ...

Critical security vulnerability in Nginx UI closed again

Important security updates close multiple vulnerabilities in the web UI for nginx web servers Nginx UI. Attackers can take ...
Infosecurity Magazine

Critical Nginx-ui MCP Flaw Actively Exploited in the Wild

A critical authentication bypass in nginx-ui, a widely used open-source web interface for managing nginx servers, has been actively exploited in the wild. The vulnerability, tracked as CVE-2026-33032 ...
Dark Reading

Critical MCP Integration Flaw Puts NGINX at Risk

Attackers can abuse the near-maximum severity flaw in nginx-ui to restart, create, modify, and delete NGINX configuration ...
The Hacker News

Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables Full Nginx Server Takeover

CVE-2026-33032 exposes nginx-ui to unauthenticated takeover via MCP endpoint, impacting 2,600+ instances with active ...
Cyber Daily

Update now: Active exploitation of Nginx UI vulnerability CVE-2026-33032 underway

“CVE-2026-33032 is a missing authentication bug with a CVSS score of 9.8; as a result of missing authentication controls, an ...
Arabian Post

Nginx-ui breach risk grows under live attacks

The GitHub-linked advisory and NVD record show the CVE was published on March 30, while the NVD page lists nginx-ui versions ...
eWeek

How Nginx Is Expanding Beyond Just Web Application Delivery

eWEEK content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More. Nginx was once perhaps best known as an open-source web ...