Skip to content

cluster management

Everything AppSec Scoop has reported about cluster management: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Organizations at risk: Nginx UI flaw grants standard users node secrets and cluster impersonation via CVE-2026-107811

A high-severity authentication bypass in Nginx UI allows standard users to access node secrets and impersonate trusted cluster members.

Oct 9, 2026

Vulnerabilities

Organisations at risk: Stolen JWTs bypass 2FA to restart Nginx UI clusters via CVE-2026-107813

Organisations using Nginx UI 2.0.0 to 2.5.0 face high-severity risk where stolen JWTs allow cluster restarts without second-factor authentication.

Oct 9, 2026