{"uuid": "0cda89b1-c898-4552-a285-994db4c0ed41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33032", "type": "seen", "source": "https://t.me/CyberDispatch/1324", "content": "CVE-2026-33032 (9.8) allows auth bypass via the /mcp_message endpoint, letting attackers take full control of Nginx with two HTTP requests due to an \u201callow-all\u201d default.", "creation_timestamp": "2026-08-31T00:00:27.094218Z"}