CVE-2024-3740

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, has been found in cym1102 nginxWebUI up to 3.9.9. This issue affects the function exec of the file /adminPage/conf/reload. The manipulation of the argument nginxExe leads to deserialization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-260579.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-502

Affected software

Vendor	Product	Versions
cym1102	nginxWebUI	3.9.0; 3.9.1; 3.9.2; 3.9.3; 3.9.4; 3.9.5; 3.9.6; 3.9.7; 3.9.8; 3.9.9
cym1102	nginxwebui	3.9.0; 3.9.1; 3.9.2; 3.9.3; 3.9.4; 3.9.5; 3.9.6; 3.9.7; 3.9.8; 3.9.9

References

https://github.com/cym1102/nginxWebUI/files/14818455/nginxwebui.rce.3.9.9.pdfExploit
https://github.com/cym1102/nginxWebUI/issues/138Issue Tracking
https://vuldb.com/?ctiid.260579Permissions Required, VDB Entry
https://vuldb.com/?id.260579Third Party Advisory, VDB Entry
https://vuldb.com/?submit.311216Third Party Advisory, VDB Entry
https://github.com/cym1102/nginxWebUI/files/14818455/nginxwebui.rce.3.9.9.pdfExploit
https://github.com/cym1102/nginxWebUI/issues/138Issue Tracking
https://vuldb.com/?ctiid.260579Permissions Required, VDB Entry
https://vuldb.com/?id.260579Third Party Advisory, VDB Entry
https://vuldb.com/?submit.311216Third Party Advisory, VDB Entry

Timeline

Published: Apr 13, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-374007.5An out of bounds read in Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to trigger an infinite loop,CVE-2024-374017.5An out-of-bounds read in IPsec of Ivanti Connect Secure before version 22.7R2.1 allows a remote unauthenticated attacker to cause a denial o CVE-2024-374035.5Ivanti Docs@Work for Android, before 2.26.0 is affected by the 'Dirty Stream' vulnerability. The application fails to properly sanitize file CVE-2024-374048.8Improper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1 and 9.1R18.9, or Ivanti Policy Secure before 22.7R1.1 CVE-2024-374056.5Livechat messages can be leaked by combining two NoSQL injections affecting livechat:loginByToken (pre-authentication) and livechat:loadHist CVE-2024-374067.5In Brave Android prior to v1.67.116, domains in the Brave Shields popup are elided from the right instead of the left, which may lead to dom CVE-2024-374079.1Libarchive before 3.7.4 allows name out-of-bounds access when a ZIP archive has an empty-name file and mac-ext is enabled. This occurs in sl CVE-2024-374087.3fprintd through 1.94.3 lacks a security attention mechanism, and thus unexpected actions might be authorized by "auth sufficient pam_fprintd CVE-2024-374095.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IdeaBox Creations PowerPack Lite for B CVE-2024-37417.5Electrolink transmitters are vulnerable to an authentication bypass vulnerability affecting the login cookie. An attacker can set an arbit CVE-2024-374107.2Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in IdeaBox Creations P CVE-2024-374115.3Missing Authorization vulnerability in Progress Planner Progress Planner progress-planner.This issue affects Progress Planner: from n/a thro