A critical vulnerability in nginx-ui, a web-based management tool for Nginx servers, is being actively exploited, allowing attackers to gain full control of the server. The flaw, identified as CVE-2026-33032, has a CVSS score of 9.8 and enables threat actors to bypass authentication mechanisms, effectively taking over the Nginx service. This vulnerability, dubbed MCPwn by Pluto Security, poses a significant risk to organizations relying on Nginx servers. As the vulnerability is being actively exploited, it is essential for administrators to prioritize patching and monitoring their systems for signs of exploitation. The disclosure of CVE-2026-33032 expands the active attack surface, making it crucial for organizations to assess their exposure and take prompt action1. This vulnerability matters to practitioners as it underscores the need for swift remediation to prevent potential server takeovers and associated security breaches.