All verified exploits

CVE-2026-27944 Unauthenticated Backup Download

CVE-2026-27944 is a critical-severity vulnerability. AttackerView checks Nginx UI sites for it with a live exploit check.

Deterministic critical Nginx UI Added 8mo ago cve-verified-cve-2026-27944

Is my site vulnerable to CVE-2026-27944?

Downloads the full system backup including SSL keys and credentials without authentication. The AES encryption key is exposed in the response header.

Is your app exploitable through CVE-2026-27944?

Scan your domain free