CVE-2026-27825

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

April 16, 2026

Last Seen

April 16, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical NGINX UI Vulnerability CVE-2026-33032 Under Active Exploitation78.8

A critical vulnerability in the nginx-ui web server management tool, tracked as CVE-2026-33032, has been actively exploited since March 2026. This flaw allows attackers to bypass authentication on the /mcp_message endpoint, enabling full control over NGINX servers through a single unauthenticated AP...