{"schema":"vulnpedia.research/1","cve":"CVE-2026-107806","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-p393-cf76-4jmr","tags":["x_refsource_CONFIRM","exploit","Exploit","Vendor Advisory","WEB","ADVISORY"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T15:00:55.470Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T15:00:55.470Z","url":"https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-p393-cf76-4jmr"},{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-14T01:52:48.127Z","url":"https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-p393-cf76-4jmr"},{"source":"nvd","sourceId":"CVE-2026-107806","modified":"2026-10-20T20:44:42.417","url":"https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-p393-cf76-4jmr"},{"source":"ghsa","sourceId":"GHSA-p393-cf76-4jmr","url":"https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-p393-cf76-4jmr"},{"source":"go","sourceId":"GO-2026-6741","url":"https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-p393-cf76-4jmr"},{"source":"ghsa","sourceId":"GHSA-p393-cf76-4jmr","modified":"2026-10-19T21:41:10.824670129Z","url":"https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-p393-cf76-4jmr"}]},{"url":"https://github.com/0xJacky/nginx-ui/commit/a467ed652591fc0cd1b466a1ec751b493faef9f7","tags":["x_refsource_MISC","Patch","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T15:00:55.470Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T15:00:55.470Z","url":"https://github.com/0xJacky/nginx-ui/commit/a467ed652591fc0cd1b466a1ec751b493faef9f7"},{"source":"nvd","sourceId":"CVE-2026-107806","modified":"2026-10-20T20:44:42.417","url":"https://github.com/0xJacky/nginx-ui/commit/a467ed652591fc0cd1b466a1ec751b493faef9f7"},{"source":"ghsa","sourceId":"GHSA-p393-cf76-4jmr","url":"https://github.com/0xJacky/nginx-ui/commit/a467ed652591fc0cd1b466a1ec751b493faef9f7"},{"source":"go","sourceId":"GO-2026-6741","url":"https://github.com/0xJacky/nginx-ui/commit/a467ed652591fc0cd1b466a1ec751b493faef9f7"},{"source":"ghsa","sourceId":"GHSA-p393-cf76-4jmr","modified":"2026-10-19T21:41:10.824670129Z","url":"https://github.com/0xJacky/nginx-ui/commit/a467ed652591fc0cd1b466a1ec751b493faef9f7"}]},{"url":"https://github.com/0xJacky/nginx-ui/releases/tag/v2.5.0","tags":["x_refsource_MISC","Release Notes","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T15:00:55.470Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T15:00:55.470Z","url":"https://github.com/0xJacky/nginx-ui/releases/tag/v2.5.0"},{"source":"nvd","sourceId":"CVE-2026-107806","modified":"2026-10-20T20:44:42.417","url":"https://github.com/0xJacky/nginx-ui/releases/tag/v2.5.0"},{"source":"ghsa","sourceId":"GHSA-p393-cf76-4jmr","url":"https://github.com/0xJacky/nginx-ui/releases/tag/v2.5.0"},{"source":"go","sourceId":"GO-2026-6741","url":"https://github.com/0xJacky/nginx-ui/releases/tag/v2.5.0"},{"source":"ghsa","sourceId":"GHSA-p393-cf76-4jmr","modified":"2026-10-19T21:41:10.824670129Z","url":"https://github.com/0xJacky/nginx-ui/releases/tag/v2.5.0"}]},{"url":"https://osv.dev/vulnerability/GHSA-p393-cf76-4jmr","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-p393-cf76-4jmr","modified":"2026-10-19T21:41:10.824670129Z","origins":[{"source":"ghsa","sourceId":"GHSA-p393-cf76-4jmr","url":"https://osv.dev/vulnerability/GHSA-p393-cf76-4jmr"},{"source":"ghsa","sourceId":"GHSA-p393-cf76-4jmr","modified":"2026-10-19T21:41:10.824670129Z","url":"https://osv.dev/vulnerability/GHSA-p393-cf76-4jmr"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107806","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-p393-cf76-4jmr","modified":"2026-10-19T21:41:10.824670129Z","origins":[{"source":"ghsa","sourceId":"GHSA-p393-cf76-4jmr","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107806"},{"source":"go","sourceId":"GO-2026-6741","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107806"},{"source":"ghsa","sourceId":"GHSA-p393-cf76-4jmr","modified":"2026-10-19T21:41:10.824670129Z","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107806"}]},{"url":"https://github.com/0xJacky/nginx-ui","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-p393-cf76-4jmr","modified":"2026-10-19T21:41:10.824670129Z","origins":[{"source":"ghsa","sourceId":"GHSA-p393-cf76-4jmr","url":"https://github.com/0xJacky/nginx-ui"},{"source":"ghsa","sourceId":"GHSA-p393-cf76-4jmr","modified":"2026-10-19T21:41:10.824670129Z","url":"https://github.com/0xJacky/nginx-ui"}]},{"url":"https://osv.dev/vulnerability/GO-2026-6741","tags":["ADVISORY"],"source":"go","sourceId":"GO-2026-6741","modified":"2026-10-19T21:31:53.113603304Z","origins":[{"source":"go","sourceId":"GO-2026-6741","url":"https://osv.dev/vulnerability/GO-2026-6741"},{"source":"go","sourceId":"GO-2026-6741","modified":"2026-10-19T21:31:53.113603304Z","url":"https://osv.dev/vulnerability/GO-2026-6741"}]},{"source":"euvd","sourceId":"EUVD-2026-95822","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-95822","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-95822","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-95822"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-p393-cf76-4jmr","url":"https://osv.dev/vulnerability/GHSA-p393-cf76-4jmr","ecosystem":"Go","name":"github.com/0xJacky/Nginx-UI","purl":"pkg:golang/github.com/0xJacky/Nginx-UI","ranges":[{"type":"SEMVER","events":[{"introduced":"1.9.10-0.20260421071512-7864e378f5cf"},{"fixed":"1.9.10-0.20260728074146-a467ed652591"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-p393-cf76-4jmr/GHSA-p393-cf76-4jmr.json"},"modified":"2026-10-19T21:41:10.824670129Z","origins":[{"source":"ghsa","sourceId":"GHSA-p393-cf76-4jmr","modified":"2026-10-19T21:41:10.824670129Z","url":"https://osv.dev/vulnerability/GHSA-p393-cf76-4jmr"}]},{"source":"go","sourceId":"GO-2026-6741","url":"https://osv.dev/vulnerability/GO-2026-6741","ecosystem":"Go","name":"github.com/0xJacky/Nginx-UI","purl":"pkg:golang/github.com/0xJacky/Nginx-UI","ranges":[{"type":"SEMVER","events":[{"introduced":"1.9.10-0.20260421071512-7864e378f5cf"},{"fixed":"1.9.10-0.20260728074146-a467ed652591"}]}],"ecosystemSpecific":{},"databaseSpecific":{"source":"https://vuln.go.dev/ID/GO-2026-6741.json"},"modified":"2026-10-19T21:31:53.113603304Z","origins":[{"source":"go","sourceId":"GO-2026-6741","modified":"2026-10-19T21:31:53.113603304Z","url":"https://osv.dev/vulnerability/GO-2026-6741"}]}],"pocCandidates":[{"url":"https://github.com/murrez/CVE-2026-107806","source":"poc-in-github","sourceId":"CVE-2026-107806","description":"CVE-2026-107806 — nginx-ui 2.3.8–2.4.x auth RCE via forged backup restore (TestConfigCmd). PoCbit PoC: GET /api/backup, tamper app.ini, POST /api/restore, POST /api/nginx/test. check/exploit, batch url|JWT. Fixed 2.5.0. https://pocbit.org/pocs/cve-2026-107806","modified":"2026-10-23T01:47:42Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-107806","url":"https://github.com/murrez/CVE-2026-107806"},{"source":"poc-in-github","sourceId":"CVE-2026-107806","modified":"2026-10-23T01:47:42Z","url":"https://github.com/murrez/CVE-2026-107806"}],"tags":[]}],"cataloguedPoc":[],"vendorStatements":[]}