Unauthenticated Bootstrap Takeover in Nginx UI Web Interface - Nginx

CVE-2026-42222

What is CVE-2026-42222?

The Nginx UI, a user interface for managing the Nginx web server, is affected by a vulnerability that allows an attacker to perform an unauthenticated bootstrap takeover during the initial installation phase. This vulnerability is triggered through a specific API endpoint exposed during installation, potentially allowing unauthorized access to sensitive functionality. As of the latest information, no public patches have been released to address this issue.

References