Description
Nginx UI 是 Nginx网络服务器的一个网页用户界面。在2.3.3版本之前，/api/backup端点无需认证即可访问，并在X-Backup-Security响应头中披露解密备份所需的加密密钥。这使得未经认证的攻击者能够下载包含敏感数据（用户凭证、会话令牌、SSL私钥、Nginx配置）的完整系统备份，并立即解密。
Nginx UI密钥泄露 CVE-2026-27944
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-g9w5-qffc-6762
https://nvd.nist.gov/vuln/detail/CVE-2026-27944
https://zhuanlan.zhihu.com/p/2014313070390948331
https://blog.csdn.net/hezhongkeji/article/details/160219099
https://www.runzero.com/blog/nginx-ui/
https://www.sentinelone.com/vulnerability-database/cve-2026-27944/
https://securityaffairs.com/189123/security/critical-nginx-ui-flaw-cve-2026-27944-exposes-server-backups.html
https://www.secpod.com/blog/critical-nginx-ui-flaw-exposes-server-backups-and-encryption-keys/