https://hackingpassion.com/tags/cve-2026-33032/Recent content in Cve-2026-33032 on HackingPassion.com : root@HackingPassion.com-[~]HugoenThu, 16 Apr 2026 11:11:43 +0200https://hackingpassion.com/nginx-ui-mcpwn-cve-2026-33032/Thu, 16 Apr 2026 11:11:43 +0200https://hackingpassion.com/nginx-ui-mcpwn-cve-2026-33032/<p>A critical vulnerability in nginx-ui has been actively exploited since March 2026, and it gives any attacker on the network full control over the nginx server behind it without a single credential. <strong>CVE-2026-33032</strong> scores <strong>9.8 on the CVSS scale</strong>, sits inside an AI integration that was added to the tool in late 2025, and the entire root cause turned out to be 27 characters of missing code. Recorded Future assigned it a risk score of <strong>94 out of 100</strong>. The researchers who found it named it <strong>MCPwn</strong>. 😏</p>