jake-young-dev/cve-2026-27944Proof-of-concept exploit for CVE-2026-27944, demonstrating decryption of nginx-ui backups via exposed private key endpoint, for authorized security testing.
A proof of concept script for CVE-2026-27944, a critical exploit allowing nginx-ui backups to be decrypted
This Proof of Concept is for educational and ethical security testing purposes only. It was developed to demonstrate the technical root cause of CVE-2026-27944 as part of a HackTheBox laboratory environment.
Unauthorized access to computer systems is illegal. The author of this repository is not responsible for any misuse of this information or for any damage caused by the use of this script. Use this tool only on systems you own or have explicit, written permission to test. Don't be dumb.
A public endpoint allows attackers to obtain the private encryption key for nginx-ui backups held at the /api/backups endpoint, allowing attackers full access to app configuration and databases
If your server is vulnerable to this exploit update nginx-ui to version 2.3.3 to patch this fix
python3 cve.py