Security News Critical nginx-ui Vulnerability CVE-2026-33032 Allows Unauthenticated Nginx Takeover TheHackerNews Daniel Bender 15 Apr 2026 CVE-2026-33032 exposes nginx-ui to unauthenticated takeover via MCP endpoint, impacting 2,600+ instances with active exploitation.