Vulnerabilities

TI-2026-61595 CVE-2026-90581 · GHSA-8mrj-3xx2-r42f

cym1102 nginxWebUI autoUpdate MainController.autoUpdate code injection

MEDIUM 57

A vulnerability was determined in cym1102 nginxWebUI up to 4.4.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00413 Published 2026-09-13 No fix listed CWE-74

TI-2026-01795 CVE-2026-2145 · GHSA-59pw-crw2-wh7v

MEDIUM 56

A vulnerability was identified in cym1102 nginxWebUI up to 4.3.7.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00301 Published 2026-02-08 No fix listed CWE-79

TI-2024-03486 CVE-2024-3740 · GHSA-6jpc-cjp9-9xgm

HIGH 75

A vulnerability, which was classified as critical, has been found in cym1102 nginxWebUI up to 3.9.9.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00815 Published 2024-04-13 No fix listed CWE-502

TI-2024-03485 CVE-2024-3739 · GHSA-hw69-gv5r-v84f

MEDIUM 48

A vulnerability classified as critical was found in cym1102 nginxWebUI up to 3.9.9.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02891 Published 2024-04-13 No fix listed CWE-78

TI-2024-03484 CVE-2024-3738 · GHSA-59pp-9g34-44f9

HIGH 81

A vulnerability classified as critical has been found in cym1102 nginxWebUI up to 3.9.9.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00517 Published 2024-04-13 No fix listed CWE-295

TI-2024-03483 CVE-2024-3737 · GHSA-vv7j-vvrr-xfwr

MEDIUM 44

A vulnerability was found in cym1102 nginxWebUI up to 3.9.9.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.009 Published 2024-04-13 No fix listed CWE-22

TI-2024-03482 CVE-2024-3736 · GHSA-8pm2-324p-pgvh

LOW 35

A vulnerability was found in cym1102 nginxWebUI up to 3.9.9.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00918 Published 2024-04-13 No fix listed CWE-434