#Server Takeover

CVE-2026-33032: Critical nginx-ui Authentication Bypass Under Attack

Threat actors are exploiting CVE-2026-33032, a critical authentication bypass in nginx-ui (MCPwn), allowing full server takeover and Nginx configuration control.