CVE-2026-33026: CWE-312: Cleartext Storage of Sensitive Information in 0xJacky nginx-ui
CVE-2026-33026 affects the 0xJacky nginx-ui web user interface for the Nginx web server. Versions prior to 2. 3. 4 have a vulnerability in the backup restore mechanism that allows attackers to tamper with encrypted backup archives and inject malicious configuration during restoration. This vulnerability has been patched in version 2. 3. 4. The issue relates to cleartext storage of sensitive information and improper validation of backup archives. The CVSS 4. 0 score is 9.
AI Analysis
Technical Summary
The vulnerability in 0xJacky nginx-ui versions before 2.3.4 involves the backup restore mechanism, which permits attackers to manipulate encrypted backup archives. This manipulation can lead to injection of malicious configuration data during the restoration process. The underlying weaknesses correspond to CWE-312 (Cleartext Storage of Sensitive Information), CWE-347 (Improper Verification of Cryptographic Signature), and CWE-354 (Improper Validation of Integrity Check Value). The issue has been addressed and fixed in version 2.3.4.
Potential Impact
Successful exploitation allows an attacker with high privileges to tamper with backup archives and inject malicious configuration into the nginx-ui during restoration. This can compromise the integrity and security of the Nginx web server configuration, potentially leading to unauthorized actions or system compromise. The vulnerability is rated critical with a CVSS 4.0 score of 9.4, reflecting high attack vector and impact metrics.
Mitigation Recommendations
Upgrade nginx-ui to version 2.3.4 or later, where this vulnerability has been patched. No other mitigation is required as the vendor has provided an official fix.
CVE-2026-33026: CWE-312: Cleartext Storage of Sensitive Information in 0xJacky nginx-ui
Description
CVE-2026-33026 affects the 0xJacky nginx-ui web user interface for the Nginx web server. Versions prior to 2. 3. 4 have a vulnerability in the backup restore mechanism that allows attackers to tamper with encrypted backup archives and inject malicious configuration during restoration. This vulnerability has been patched in version 2. 3. 4. The issue relates to cleartext storage of sensitive information and improper validation of backup archives. The CVSS 4. 0 score is 9.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in 0xJacky nginx-ui versions before 2.3.4 involves the backup restore mechanism, which permits attackers to manipulate encrypted backup archives. This manipulation can lead to injection of malicious configuration data during the restoration process. The underlying weaknesses correspond to CWE-312 (Cleartext Storage of Sensitive Information), CWE-347 (Improper Verification of Cryptographic Signature), and CWE-354 (Improper Validation of Integrity Check Value). The issue has been addressed and fixed in version 2.3.4.
Potential Impact
Successful exploitation allows an attacker with high privileges to tamper with backup archives and inject malicious configuration into the nginx-ui during restoration. This can compromise the integrity and security of the Nginx web server configuration, potentially leading to unauthorized actions or system compromise. The vulnerability is rated critical with a CVSS 4.0 score of 9.4, reflecting high attack vector and impact metrics.
Mitigation Recommendations
Upgrade nginx-ui to version 2.3.4 or later, where this vulnerability has been patched. No other mitigation is required as the vendor has provided an official fix.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-03-17T17:22:14.668Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 69cad4ace6bfc5ba1d65117d
Added to database: 3/30/2026, 7:53:16 PM
Last enriched: 4/7/2026, 10:54:08 AM
Last updated: 5/15/2026, 12:02:31 AM
Views: 91
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.