Overview   CVE-2026-33032 is a critical authentication bypass vulnerability affecting Nginx UI, a web-based interface used to manage Nginx configurations. The flaw exists in the Model Context Protocol integration, where the /mcp_message endpoint does not enforce authentication and relies only on an IP whitelist that is empty by default. This fail-open behavior can allow…

Overview   The vulnerability lies in how the Docker daemon handles large HTTP request bodies when interacting with Authorization Plugins (AuthZ) such as OPA or Prisma Cloud. By sending a request larger than 1MB, an attacker can trick the daemon into forwarding an empty request body to the security plugin. The plugin, seeing an empty…

Overview This vulnerability exists in the data plane of BIG-IP systems where the APM module is active. It allows a remote, unauthenticated attacker to send specially crafted malicious traffic to a virtual server configured with an APM access policy. This triggers an execution path in the apmd process, leading to arbitrary code…

Overview CVE-2026-20127 is a vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system. This vulnerability exists because the peering authentication mechanism…