Critical MCP Integration Flaw Puts NGINX at Risk

This DarkReading batch highlights a critical MCP-integration flaw in nginx-ui that can let attackers restart and create/modify/delete NGINX config files (described as near-maximum severity). The feed also calls out multiple high-risk and actively exploited issues: Fortinet FortiClient authentication-bypass zero-day (CVE-2026-35616) with in-the-wild exploitation; an Adobe Acrobat/Reader zero-day exploited via crafted PDFs; Microsoft and Salesforce patches for prompt-injection data-leak flaws in AI agents; a large Microsoft update dominated by elevation-of-privilege bugs (including two zero-days