The vulnerability, with a CVSS score of 9.8, relates to the software’s support for Model Context Protocol (MCP) servers, ...

CVE-2026-33032 exposes nginx-ui to unauthenticated takeover via MCP endpoint, impacting 2,600+ instances with active ...

Attackers can abuse the near-maximum severity flaw in nginx-ui to restart, create, modify, and delete NGINX configuration ...

A critical vulnerability in Nginx UI with Model Context Protocol (MCP) support is now being exploited in the wild for full ...

A critical Nginx UI vulnerability that allows attackers to take full control of servers has been exploited in the wild.

ECH encrypts the TLS handshake, backends speak HTTP/2, and Multipath TCP uses multiple network paths in parallel.

A critical authentication bypass in nginx-ui, a widely used open-source web interface for managing nginx servers, has been ...

A monthly overview of things you need to know as an architect or aspiring architect. Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with ...

Running services on your network-attached storage (NAS) device is one thing but it's a different beast to make these securely ...

If you're serving up websites from your Linux data center and using NGINX, you need to enable SSL for a more secure solution. Secure Sockets Layer (SSL) has become a necessity for web servers. Why?