[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5FU9nG2JZS36ZiEnrZtRs0Oe8NkJO1WsnPbav7e6Iws":3},{"article":4,"iocs":41,"watch_terms":46},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":26,"category":27,"article_tags":30},"af722226-c4e1-4b0f-866a-85be3105e6ee","Critical MCP Integration Flaw Puts NGINX at Risk","critical-mcp-integration-flaw-puts-nginx-at-risk-670fb6","Attackers can abuse the near-maximum severity flaw in nginx-ui to restart, create, modify, and delete NGINX configuration files.","A critical severity vulnerability in nginx-ui enables remote attackers to restart, create, modify, and delete NGINX configuration files through MCP integration abuse. This flaw could allow unauthorized control over web server operations and potential service disruption. The vulnerability affects systems running vulnerable versions of nginx-ui.","Critical flaw in nginx-ui allows attackers to manipulate NGINX configuration files.",null,"https:\u002F\u002Fwww.darkreading.com\u002Fapplication-security\u002Fcritical-mcp-integration-flaw-nginx-risk","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fblt446b8eb1b9e96075\u002F69e00259f061614772ab3b7e\u002Fmcp_Jack_the_sparow_shutterstock.jpg?width=1280&auto=webp&quality=80&disable=upscale","2026-04-15T21:45:18+00:00","2026-04-16T00:00:38.657784+00:00",8,[18,21,23],{"name":19,"type":20},"nginx-ui","product",{"name":22,"type":20},"NGINX",{"name":24,"type":25},"MCP (Model Context Protocol)","technology","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":26,"icon":11,"name":28,"slug":29},"Vulnerabilities","vulnerabilities",[31,36],{"category":32},{"id":33,"icon":11,"name":34,"slug":35},"574f766a-fb3f-487c-8d2c-0720ae75471b","Zero-day","zero-day",{"category":37},{"id":38,"icon":11,"name":39,"slug":40},"d6f63bb8-0801-486a-be7f-171400700454","IoT\u002FOT","iot-ot",[42],{"type":43,"value":44,"context":45},"malware","nginx-ui (vulnerable component)","Web UI for NGINX with critical MCP integration flaw allowing config manipulation",[19,22]]