Sploitus

23 exploited vulnerabilities in Nginx-Ui

Vulnerabilities with publicly known exploits

Vendors
Nginx-Ui, Nginx, Amazon, Alibaba, Cloudflare, Godaddy
With known exploits
23
Affected Nginxui Nginx Ui versions
< 2.3.8, 2.3.5, 2.3.3, 1.9.9-4, 2.0.0, 1.2.0, 1.2.1, 1.2.2, 1.3.0, 1.3.1, 1.3.2, 1.3.3, 1.4.0, 1.4.1, 1.4.2, 1.5.0, 1.5.1, 1.5.2, 1.6.0, 1.6.1, 1.6.2, 1.6.3, 1.6.5, 1.6.6, 1.6.7, 1.6.8, 1.7.0, 1.7.1, 1.7.2, 1.7.3, 1.7.4, 1.7.5, 1.7.6, 1.7.7, 1.7.8, 1.7.9, 1.8.0, 1.8.1, 1.8.2, 1.8.3, 1.8.4, 1.9.9, 1.9.9-1, 1.9.9-2, 1.9.9-3, 2.3.4
Affected Uozi Cosy versions
< 1.30.1

Vulnerabilities with exploits

Highest CVSS first — 6 of these already have exploit code on Sploitus

CVE-2026-42238 1 exploit
CVSS 9.8 CRITICAL 2026-04-21FIX AVAILABLE
CVE-2026-33032 8 exploits
CVSS 9.8 CRITICAL 2026-03-28FIX AVAILABLE
CVE-2026-27944 19 exploits
CVSS 9.8 CRITICAL 2026-03-05FIX AVAILABLE
CVE-2024-49368 1 exploit
CVSS 9.8 CRITICAL 2024-10-14FIX AVAILABLE
CVE-2024-23827
CVSS 9.8 CRITICAL 2024-01-28FIX AVAILABLE
CVE-2026-44015
CVSS 9.9 CRITICAL 2026-04-29FIX AVAILABLE
CVE-2026-33030
CVSS 9.9 CRITICAL 2026-03-30FIX AVAILABLE
CVE-2026-42222
CVSS 9.8 CRITICAL 2026-04-27
CVE-2026-42221 1 exploit
CVSS 9.8 CRITICAL 2026-04-21FIX AVAILABLE
CVE-2026-34403
CVSS 8.1 HIGH 2026-03-16FIX AVAILABLE
CVE-2026-33026
CVSS 9.4 CRITICAL 2026-03-17FIX AVAILABLE
CVE-2024-23828
CVSS 8.8 HIGH 2024-01-22FIX AVAILABLE
CVE-2024-22198 2 exploits
CVSS 8.8 HIGH 2023-12-19FIX AVAILABLE
CVE-2024-22197
CVSS 8.8 HIGH 2023-12-19FIX AVAILABLE
CVE-2024-49366
CVSS 8.7 HIGH 2024-10-09FIX AVAILABLE
CVE-2026-33031
CVSS 8.6 HIGH 2026-04-20FIX AVAILABLE
CVE-2026-33028
CVSS 7.5 HIGH 2026-03-30FIX AVAILABLE
CVE-2024-49367
CVSS 7.5 HIGH 2024-10-09FIX AVAILABLE
CVE-2024-22196
CVSS 7.0 HIGH 2023-12-19FIX AVAILABLE
CVE-2026-33029
CVSS 6.9 MEDIUM 2026-03-30FIX AVAILABLE
CVE-2026-33027
CVSS 6.9 MEDIUM 2026-03-30FIX AVAILABLE
CVE-2026-42223
CVSS 6.5 MEDIUM 2026-04-21FIX AVAILABLE
CVE-2026-42220
CVSS 6.5 MEDIUM 2026-04-21FIX AVAILABLE