graphwiz.aiMCPwn: How MCP Integration Turned nginx-ui Into a Remote Takeover
CVE-2026-33032 exposes how bolting Model Context Protocol endpoints onto existing applications creates dangerous attack surfaces, with 2,600 nginx-ui instances actively exploitable.
mcpnginxsecurityvulnerabilitycveai-integrationattack-surface