CVE-2026-27944 Unauthenticated Backup Download

Deterministic critical Nginx UI Added 6mo ago cve-verified-cve-2026-27944

Downloads the full system backup including SSL keys and credentials without authentication. The AES encryption key is exposed in the response header.

Related Nginx UI exploits

Is your app exploitable through CVE-2026-27944?