> Critical Nginx UI auth bypass flaw now actively exploited in the wild
[AUTHOR: Bill Toulas]
[DATE: 15/04/2026 22:35]
[LANGUAGE: EN]
A critical vulnerability in Nginx UI with Model Context Protocol (MCP) support is now being exploited in the wild for full server takeover without authentication. [...]