Nginx UI is a web user interface for the Nginx web server.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Mar 30, 2026 · NIST NVD

   Detected

   Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, the nginx-ui application is vulnerable to a Race Condition. Due to the complete absence of synchronization mechanisms (Mutex) and non-atomic file writes, concurrent requests lead to the severe corruption of the primary configuration file (app.ini). This vulnerability results in a persistent Denial of Service (DoS) a

2. Jun 17, 2026 · NIST NVD

   Updated

   Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, the nginx-ui application is vulnerable to a Race Condition. Due to the complete absence of synchronization mechanisms (Mutex) and non-atomic file writes, concurrent requests lead to the severe corruption of the primary configuration file (app.ini). This vulnerability results in a persistent Denial of Service (DoS) a

Affected

• cpe nginxui/nginx uiversion unspecified
• cpe uozi/cosyversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-33028

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-33028

  Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, the nginx-ui application is vulnerable to a Race Condition. Due to the complete absence of synchronization mechanisms (Mutex) and non-atomic file writes, concurrent requests lead to the severe corr

  nvd.nist.gov

References

• Product · github.com
• Exploit · github.com