CVE-2026-129171

NginxPulse 1.5.0 before 1.6.26 SQL Injection via /api/stats/:type
Critical · CVSS 9.3

Affected likaia NginxPulse (1.5.0..1.6.26)
Fixed See official CVE record

https://www.cve.org/CVERecord?id=CVE-2026-129171