CVE-2026-33032 - Vulnerability Details

Related Threat Clusters

• Critical NGINX UI Vulnerability CVE-2026-33032 Under Active Exploitation

  A critical vulnerability in the nginx-ui web server management tool, tracked as CVE-2026-33032, has been actively exploited since March 2026. This flaw allows attackers to bypass authentication on the /mcp_message…

  22 articles · Updated April 15, 2026

Recent Intelligence Reports

• Nginx-ui MCP missing authentication flaw actively exploited | news — Scworld · April 16, 2026
• Nginx-ui Vulnerability Actively Exploited in Attack — Cybersecuritynews · April 16, 2026
• CVE-2026-33032 Nginx Takeover Exploit (CVSS 9.8) — Purple-Ops · April 16, 2026
• Nginx — Gbhackers · April 16, 2026
• Critical Nginx UI auth bypass flaw now actively exploited in the wild — Bleepingcomputer · April 15, 2026
• Critical MCP Integration Flaw Puts NGINX at Risk — Darkreading · April 15, 2026
• Critical nginx UI tool vulnerability opens web servers to full compromise — Csoonline · April 15, 2026
• CVE-2026-33032: severe nginx — Securityaffairs.Co · April 15, 2026

Related Entities