{"schema":"vulnpedia.research/1","cve":"CVE-2026-107808","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-45gv-9wjv-xh7p","tags":["x_refsource_CONFIRM","exploit","Exploit","Vendor Advisory","Mitigation","WEB","ADVISORY"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T15:11:44.387Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T15:11:44.387Z","url":"https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-45gv-9wjv-xh7p"},{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-09T17:19:53.438Z","url":"https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-45gv-9wjv-xh7p"},{"source":"nvd","sourceId":"CVE-2026-107808","modified":"2026-10-20T15:24:07.787","url":"https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-45gv-9wjv-xh7p"},{"source":"ghsa","sourceId":"GHSA-45gv-9wjv-xh7p","url":"https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-45gv-9wjv-xh7p"},{"source":"go","sourceId":"GO-2026-6704","url":"https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-45gv-9wjv-xh7p"},{"source":"ghsa","sourceId":"GHSA-45gv-9wjv-xh7p","modified":"2026-10-19T21:41:12.332793483Z","url":"https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-45gv-9wjv-xh7p"}]},{"url":"https://github.com/0xJacky/nginx-ui/commit/95cd21b70814e5d9a48a359aa238aeea1ac97429","tags":["x_refsource_MISC","Patch","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T15:11:44.387Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T15:11:44.387Z","url":"https://github.com/0xJacky/nginx-ui/commit/95cd21b70814e5d9a48a359aa238aeea1ac97429"},{"source":"nvd","sourceId":"CVE-2026-107808","modified":"2026-10-20T15:24:07.787","url":"https://github.com/0xJacky/nginx-ui/commit/95cd21b70814e5d9a48a359aa238aeea1ac97429"},{"source":"ghsa","sourceId":"GHSA-45gv-9wjv-xh7p","url":"https://github.com/0xJacky/nginx-ui/commit/95cd21b70814e5d9a48a359aa238aeea1ac97429"},{"source":"go","sourceId":"GO-2026-6704","url":"https://github.com/0xJacky/nginx-ui/commit/95cd21b70814e5d9a48a359aa238aeea1ac97429"},{"source":"ghsa","sourceId":"GHSA-45gv-9wjv-xh7p","modified":"2026-10-19T21:41:12.332793483Z","url":"https://github.com/0xJacky/nginx-ui/commit/95cd21b70814e5d9a48a359aa238aeea1ac97429"}]},{"url":"https://github.com/0xJacky/nginx-ui/releases/tag/v2.5.0","tags":["x_refsource_MISC","Release Notes","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T15:11:44.387Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T15:11:44.387Z","url":"https://github.com/0xJacky/nginx-ui/releases/tag/v2.5.0"},{"source":"nvd","sourceId":"CVE-2026-107808","modified":"2026-10-20T15:24:07.787","url":"https://github.com/0xJacky/nginx-ui/releases/tag/v2.5.0"},{"source":"ghsa","sourceId":"GHSA-45gv-9wjv-xh7p","url":"https://github.com/0xJacky/nginx-ui/releases/tag/v2.5.0"},{"source":"go","sourceId":"GO-2026-6704","url":"https://github.com/0xJacky/nginx-ui/releases/tag/v2.5.0"},{"source":"ghsa","sourceId":"GHSA-45gv-9wjv-xh7p","modified":"2026-10-19T21:41:12.332793483Z","url":"https://github.com/0xJacky/nginx-ui/releases/tag/v2.5.0"}]},{"url":"https://osv.dev/vulnerability/GHSA-45gv-9wjv-xh7p","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-45gv-9wjv-xh7p","modified":"2026-10-19T21:41:12.332793483Z","origins":[{"source":"ghsa","sourceId":"GHSA-45gv-9wjv-xh7p","url":"https://osv.dev/vulnerability/GHSA-45gv-9wjv-xh7p"},{"source":"ghsa","sourceId":"GHSA-45gv-9wjv-xh7p","modified":"2026-10-19T21:41:12.332793483Z","url":"https://osv.dev/vulnerability/GHSA-45gv-9wjv-xh7p"}]},{"url":"https://github.com/0xJacky/nginx-ui","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-45gv-9wjv-xh7p","modified":"2026-10-19T21:41:12.332793483Z","origins":[{"source":"ghsa","sourceId":"GHSA-45gv-9wjv-xh7p","url":"https://github.com/0xJacky/nginx-ui"},{"source":"ghsa","sourceId":"GHSA-45gv-9wjv-xh7p","modified":"2026-10-19T21:41:12.332793483Z","url":"https://github.com/0xJacky/nginx-ui"}]},{"url":"https://osv.dev/vulnerability/GO-2026-6704","tags":["ADVISORY"],"source":"go","sourceId":"GO-2026-6704","modified":"2026-10-19T21:31:49.017741285Z","origins":[{"source":"go","sourceId":"GO-2026-6704","url":"https://osv.dev/vulnerability/GO-2026-6704"},{"source":"go","sourceId":"GO-2026-6704","modified":"2026-10-19T21:31:49.017741285Z","url":"https://osv.dev/vulnerability/GO-2026-6704"}]},{"source":"euvd","sourceId":"EUVD-2026-95891","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-95891","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-95891","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-95891"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-45gv-9wjv-xh7p","url":"https://osv.dev/vulnerability/GHSA-45gv-9wjv-xh7p","ecosystem":"Go","name":"github.com/0xJacky/Nginx-UI","purl":"pkg:golang/github.com/0xJacky/Nginx-UI","ranges":[{"type":"SEMVER","events":[{"introduced":"1.9.10-0.20250517140552-daee3ac7ade1"},{"fixed":"1.9.10-0.20260728074558-95cd21b70814"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-45gv-9wjv-xh7p/GHSA-45gv-9wjv-xh7p.json"},"modified":"2026-10-19T21:41:12.332793483Z","origins":[{"source":"ghsa","sourceId":"GHSA-45gv-9wjv-xh7p","modified":"2026-10-19T21:41:12.332793483Z","url":"https://osv.dev/vulnerability/GHSA-45gv-9wjv-xh7p"}]},{"source":"go","sourceId":"GO-2026-6704","url":"https://osv.dev/vulnerability/GO-2026-6704","ecosystem":"Go","name":"github.com/0xJacky/Nginx-UI","purl":"pkg:golang/github.com/0xJacky/Nginx-UI","ranges":[{"type":"SEMVER","events":[{"introduced":"1.9.10-0.20250517140552-daee3ac7ade1"},{"fixed":"1.9.10-0.20260728074558-95cd21b70814"}]}],"ecosystemSpecific":{},"databaseSpecific":{"source":"https://vuln.go.dev/ID/GO-2026-6704.json"},"modified":"2026-10-19T21:31:49.017741285Z","origins":[{"source":"go","sourceId":"GO-2026-6704","modified":"2026-10-19T21:31:49.017741285Z","url":"https://osv.dev/vulnerability/GO-2026-6704"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}