Nginx UI: DoS via Negative Integer Input in Logrotate Interval

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-33029 · CVE overview and exploitation status

EUVD-2026-17154

GHSA-cp8r-8jvw-v3qg

GO-2026-4902

cve-program · CVE-2026-33029

• https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-cp8r-8jvw-v3qg
• https://github.com/0xJacky/nginx-ui/releases/tag/v2.3.4

euvd · EUVD-2026-17154

• https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-cp8r-8jvw-v3qg
• https://github.com/0xJacky/nginx-ui/releases/tag/v2.3.4

nvd · CVE-2026-33029

• https://github.com/0xJacky/nginx-ui/releases/tag/v2.3.4
• https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-cp8r-8jvw-v3qg

osv · GHSA-cp8r-8jvw-v3qg

• https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-cp8r-8jvw-v3qg
• https://nvd.nist.gov/vuln/detail/CVE-2026-33029
• https://github.com/0xJacky/nginx-ui
• https://github.com/0xJacky/nginx-ui/releases/tag/v2.3.4

osv · GO-2026-4902

• https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-cp8r-8jvw-v3qg
• https://nvd.nist.gov/vuln/detail/CVE-2026-33029
• https://github.com/0xJacky/nginx-ui/releases/tag/v2.3.4

• Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, an input validation vulnerability in the logrotate configuration allows an authenticated user to cause a complete Denial of Service (DoS). By submitting a ne… · Advisory content revised · 15 Nov 2026