Critical Nginx UI auth bypass flaw now actively exploited in the wild

BleepingComputer • 4/15/2026, 10:35:09 PM • View Original
vulnerabilitycriticalvulnerability

A critical vulnerability in Nginx UI with Model Context Protocol (MCP) support is now being exploited in the wild for full server takeover without authentication. [...]

A critical vulnerability in Nginx UI with Model Context Protocol (MCP) support is now being exploited in the wild for full server takeover without authentication. [...]