{"schema":"vulnpedia.research/1","cve":"CVE-2026-107807","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-pvgv-gcp7-v38g","tags":["x_refsource_CONFIRM","exploit","Exploit","Vendor Advisory","WEB","ADVISORY"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T15:04:18.109Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T15:04:18.109Z","url":"https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-pvgv-gcp7-v38g"},{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-09T17:57:31.880Z","url":"https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-pvgv-gcp7-v38g"},{"source":"nvd","sourceId":"CVE-2026-107807","modified":"2026-10-20T15:27:19.727","url":"https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-pvgv-gcp7-v38g"},{"source":"ghsa","sourceId":"GHSA-pvgv-gcp7-v38g","url":"https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-pvgv-gcp7-v38g"},{"source":"go","sourceId":"GO-2026-6708","url":"https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-pvgv-gcp7-v38g"},{"source":"ghsa","sourceId":"GHSA-pvgv-gcp7-v38g","modified":"2026-10-19T21:41:21.908207364Z","url":"https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-pvgv-gcp7-v38g"}]},{"url":"https://github.com/0xJacky/nginx-ui/commit/a3999bd78a3b97ab22e6b5e9fd478ac57598a954","tags":["x_refsource_MISC","Patch","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T15:04:18.109Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T15:04:18.109Z","url":"https://github.com/0xJacky/nginx-ui/commit/a3999bd78a3b97ab22e6b5e9fd478ac57598a954"},{"source":"nvd","sourceId":"CVE-2026-107807","modified":"2026-10-20T15:27:19.727","url":"https://github.com/0xJacky/nginx-ui/commit/a3999bd78a3b97ab22e6b5e9fd478ac57598a954"},{"source":"ghsa","sourceId":"GHSA-pvgv-gcp7-v38g","url":"https://github.com/0xJacky/nginx-ui/commit/a3999bd78a3b97ab22e6b5e9fd478ac57598a954"},{"source":"go","sourceId":"GO-2026-6708","url":"https://github.com/0xJacky/nginx-ui/commit/a3999bd78a3b97ab22e6b5e9fd478ac57598a954"},{"source":"ghsa","sourceId":"GHSA-pvgv-gcp7-v38g","modified":"2026-10-19T21:41:21.908207364Z","url":"https://github.com/0xJacky/nginx-ui/commit/a3999bd78a3b97ab22e6b5e9fd478ac57598a954"}]},{"url":"https://github.com/0xJacky/nginx-ui/releases/tag/v2.5.0","tags":["x_refsource_MISC","Release Notes","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T15:04:18.109Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T15:04:18.109Z","url":"https://github.com/0xJacky/nginx-ui/releases/tag/v2.5.0"},{"source":"nvd","sourceId":"CVE-2026-107807","modified":"2026-10-20T15:27:19.727","url":"https://github.com/0xJacky/nginx-ui/releases/tag/v2.5.0"},{"source":"ghsa","sourceId":"GHSA-pvgv-gcp7-v38g","url":"https://github.com/0xJacky/nginx-ui/releases/tag/v2.5.0"},{"source":"go","sourceId":"GO-2026-6708","url":"https://github.com/0xJacky/nginx-ui/releases/tag/v2.5.0"},{"source":"ghsa","sourceId":"GHSA-pvgv-gcp7-v38g","modified":"2026-10-19T21:41:21.908207364Z","url":"https://github.com/0xJacky/nginx-ui/releases/tag/v2.5.0"}]},{"url":"https://osv.dev/vulnerability/GHSA-pvgv-gcp7-v38g","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-pvgv-gcp7-v38g","modified":"2026-10-19T21:41:21.908207364Z","origins":[{"source":"ghsa","sourceId":"GHSA-pvgv-gcp7-v38g","url":"https://osv.dev/vulnerability/GHSA-pvgv-gcp7-v38g"},{"source":"ghsa","sourceId":"GHSA-pvgv-gcp7-v38g","modified":"2026-10-19T21:41:21.908207364Z","url":"https://osv.dev/vulnerability/GHSA-pvgv-gcp7-v38g"}]},{"url":"https://github.com/0xJacky/nginx-ui","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-pvgv-gcp7-v38g","modified":"2026-10-19T21:41:21.908207364Z","origins":[{"source":"ghsa","sourceId":"GHSA-pvgv-gcp7-v38g","url":"https://github.com/0xJacky/nginx-ui"},{"source":"ghsa","sourceId":"GHSA-pvgv-gcp7-v38g","modified":"2026-10-19T21:41:21.908207364Z","url":"https://github.com/0xJacky/nginx-ui"}]},{"url":"https://osv.dev/vulnerability/GO-2026-6708","tags":["ADVISORY"],"source":"go","sourceId":"GO-2026-6708","modified":"2026-10-19T21:31:49.018903603Z","origins":[{"source":"go","sourceId":"GO-2026-6708","url":"https://osv.dev/vulnerability/GO-2026-6708"},{"source":"go","sourceId":"GO-2026-6708","modified":"2026-10-19T21:31:49.018903603Z","url":"https://osv.dev/vulnerability/GO-2026-6708"}]},{"source":"euvd","sourceId":"EUVD-2026-95882","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-95882","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-95882","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-95882"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-pvgv-gcp7-v38g","url":"https://osv.dev/vulnerability/GHSA-pvgv-gcp7-v38g","ecosystem":"Go","name":"github.com/0xJacky/Nginx-UI","purl":"pkg:golang/github.com/0xJacky/Nginx-UI","ranges":[{"type":"SEMVER","events":[{"introduced":"1.9.10-0.20250517140552-daee3ac7ade1"},{"fixed":"1.9.10-0.20260728074433-a3999bd78a3b"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-pvgv-gcp7-v38g/GHSA-pvgv-gcp7-v38g.json"},"modified":"2026-10-19T21:41:21.908207364Z","origins":[{"source":"ghsa","sourceId":"GHSA-pvgv-gcp7-v38g","modified":"2026-10-19T21:41:21.908207364Z","url":"https://osv.dev/vulnerability/GHSA-pvgv-gcp7-v38g"}]},{"source":"go","sourceId":"GO-2026-6708","url":"https://osv.dev/vulnerability/GO-2026-6708","ecosystem":"Go","name":"github.com/0xJacky/Nginx-UI","purl":"pkg:golang/github.com/0xJacky/Nginx-UI","ranges":[{"type":"SEMVER","events":[{"introduced":"1.9.10-0.20250517140552-daee3ac7ade1"},{"fixed":"1.9.10-0.20260728074433-a3999bd78a3b"}]}],"ecosystemSpecific":{},"databaseSpecific":{"source":"https://vuln.go.dev/ID/GO-2026-6708.json"},"modified":"2026-10-19T21:31:49.018903603Z","origins":[{"source":"go","sourceId":"GO-2026-6708","modified":"2026-10-19T21:31:49.018903603Z","url":"https://osv.dev/vulnerability/GO-2026-6708"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}