Report: Essential Guide: CVE-2026-42222 - nginx-ui: Unauthenticated first-boot instance claim via POST /api/install allows...

Report: Essential Guide: CVE-2026-42222 - nginx-ui: Unauthenticated first-boot instance claim via POST /api/install allows...

CVE ID :CVE-2026-42222 Published : May 4, 2026, 9:16 p.m. | 58 minutes ago Description :Nginx UI is a web user interface for the Nginx web server. In version 2.3.5, an unauthenticated bootstrap takeover exists in nginx-ui during the initial installation window exposed by POST /api/install. At time of publication no public patches are available. Severity: 8.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
HIGH
Published
May 4, 2026
Affected Product: Nginx