{"schema":"vulnpedia.research/1","cve":"CVE-2026-107809","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-33rr-wq23-g6gg","tags":["x_refsource_CONFIRM","Exploit","Vendor Advisory","WEB","ADVISORY"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T15:22:10.562Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T15:22:10.562Z","url":"https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-33rr-wq23-g6gg"},{"source":"nvd","sourceId":"CVE-2026-107809","modified":"2026-10-20T15:15:58.807","url":"https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-33rr-wq23-g6gg"},{"source":"ghsa","sourceId":"GHSA-33rr-wq23-g6gg","url":"https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-33rr-wq23-g6gg"},{"source":"go","sourceId":"GO-2026-6703","url":"https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-33rr-wq23-g6gg"},{"source":"ghsa","sourceId":"GHSA-33rr-wq23-g6gg","modified":"2026-10-19T21:41:07.284327902Z","url":"https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-33rr-wq23-g6gg"}]},{"url":"https://github.com/0xJacky/nginx-ui/commit/a3999bd78a3b97ab22e6b5e9fd478ac57598a954","tags":["x_refsource_MISC","Patch","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T15:22:10.562Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T15:22:10.562Z","url":"https://github.com/0xJacky/nginx-ui/commit/a3999bd78a3b97ab22e6b5e9fd478ac57598a954"},{"source":"nvd","sourceId":"CVE-2026-107809","modified":"2026-10-20T15:15:58.807","url":"https://github.com/0xJacky/nginx-ui/commit/a3999bd78a3b97ab22e6b5e9fd478ac57598a954"},{"source":"ghsa","sourceId":"GHSA-33rr-wq23-g6gg","url":"https://github.com/0xJacky/nginx-ui/commit/a3999bd78a3b97ab22e6b5e9fd478ac57598a954"},{"source":"go","sourceId":"GO-2026-6703","url":"https://github.com/0xJacky/nginx-ui/commit/a3999bd78a3b97ab22e6b5e9fd478ac57598a954"},{"source":"ghsa","sourceId":"GHSA-33rr-wq23-g6gg","modified":"2026-10-19T21:41:07.284327902Z","url":"https://github.com/0xJacky/nginx-ui/commit/a3999bd78a3b97ab22e6b5e9fd478ac57598a954"}]},{"url":"https://github.com/0xJacky/nginx-ui/releases/tag/v2.5.0","tags":["x_refsource_MISC","Release Notes","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T15:22:10.562Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T15:22:10.562Z","url":"https://github.com/0xJacky/nginx-ui/releases/tag/v2.5.0"},{"source":"nvd","sourceId":"CVE-2026-107809","modified":"2026-10-20T15:15:58.807","url":"https://github.com/0xJacky/nginx-ui/releases/tag/v2.5.0"},{"source":"ghsa","sourceId":"GHSA-33rr-wq23-g6gg","url":"https://github.com/0xJacky/nginx-ui/releases/tag/v2.5.0"},{"source":"go","sourceId":"GO-2026-6703","url":"https://github.com/0xJacky/nginx-ui/releases/tag/v2.5.0"},{"source":"ghsa","sourceId":"GHSA-33rr-wq23-g6gg","modified":"2026-10-19T21:41:07.284327902Z","url":"https://github.com/0xJacky/nginx-ui/releases/tag/v2.5.0"}]},{"url":"https://osv.dev/vulnerability/GHSA-33rr-wq23-g6gg","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-33rr-wq23-g6gg","modified":"2026-10-19T21:41:07.284327902Z","origins":[{"source":"ghsa","sourceId":"GHSA-33rr-wq23-g6gg","url":"https://osv.dev/vulnerability/GHSA-33rr-wq23-g6gg"},{"source":"ghsa","sourceId":"GHSA-33rr-wq23-g6gg","modified":"2026-10-19T21:41:07.284327902Z","url":"https://osv.dev/vulnerability/GHSA-33rr-wq23-g6gg"}]},{"url":"https://github.com/0xJacky/nginx-ui","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-33rr-wq23-g6gg","modified":"2026-10-19T21:41:07.284327902Z","origins":[{"source":"ghsa","sourceId":"GHSA-33rr-wq23-g6gg","url":"https://github.com/0xJacky/nginx-ui"},{"source":"ghsa","sourceId":"GHSA-33rr-wq23-g6gg","modified":"2026-10-19T21:41:07.284327902Z","url":"https://github.com/0xJacky/nginx-ui"}]},{"url":"https://osv.dev/vulnerability/GO-2026-6703","tags":["ADVISORY"],"source":"go","sourceId":"GO-2026-6703","modified":"2026-10-19T21:31:52.274284585Z","origins":[{"source":"go","sourceId":"GO-2026-6703","url":"https://osv.dev/vulnerability/GO-2026-6703"},{"source":"go","sourceId":"GO-2026-6703","modified":"2026-10-19T21:31:52.274284585Z","url":"https://osv.dev/vulnerability/GO-2026-6703"}]},{"source":"euvd","sourceId":"EUVD-2026-95892","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-95892","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-95892","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-95892"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-33rr-wq23-g6gg","url":"https://osv.dev/vulnerability/GHSA-33rr-wq23-g6gg","ecosystem":"Go","name":"github.com/0xJacky/Nginx-UI","purl":"pkg:golang/github.com/0xJacky/Nginx-UI","ranges":[{"type":"SEMVER","events":[{"introduced":"1.9.10-0.20250517140552-daee3ac7ade1"},{"fixed":"1.9.10-0.20260728074433-a3999bd78a3b"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-33rr-wq23-g6gg/GHSA-33rr-wq23-g6gg.json"},"modified":"2026-10-19T21:41:07.284327902Z","origins":[{"source":"ghsa","sourceId":"GHSA-33rr-wq23-g6gg","modified":"2026-10-19T21:41:07.284327902Z","url":"https://osv.dev/vulnerability/GHSA-33rr-wq23-g6gg"}]},{"source":"go","sourceId":"GO-2026-6703","url":"https://osv.dev/vulnerability/GO-2026-6703","ecosystem":"Go","name":"github.com/0xJacky/Nginx-UI","purl":"pkg:golang/github.com/0xJacky/Nginx-UI","ranges":[{"type":"SEMVER","events":[{"introduced":"1.9.10-0.20250517140552-daee3ac7ade1"},{"fixed":"1.9.10-0.20260728074433-a3999bd78a3b"}]}],"ecosystemSpecific":{},"databaseSpecific":{"source":"https://vuln.go.dev/ID/GO-2026-6703.json"},"modified":"2026-10-19T21:31:52.274284585Z","origins":[{"source":"go","sourceId":"GO-2026-6703","modified":"2026-10-19T21:31:52.274284585Z","url":"https://osv.dev/vulnerability/GO-2026-6703"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}