Topic

CVE-2026-33032

News, analysis and practical guidance on CVE-2026-33032.

1 articleUpdated 28 Sep 2026

ThreatsCloud & SaaSBreaking
Nginx UI Model Context Protocol Endpoint Missing Authentication Enables Unauthenticated RCE CVE-2026-33032
A critical CVSS 9.8 vulnerability in Nginx UI permits unauthenticated attackers to execute arbitrary commands via exposed Model Context Protocol endpoints.
Daniel Okafor28 Sep 20269 min read