{"uuid": "86f826ad-c393-458f-9835-594d26b0e1a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33032", "type": "seen", "source": "https://t.me/CyberDispatch/1324", "content": "CVE-2026-33032 (9.8) allows auth bypass via the /mcp_message endpoint, letting attackers take full control of Nginx with two HTTP requests due to an \u201callow-all\u201d default.", "creation_timestamp": "2026-08-29T20:00:17.548083Z"}