Hackers are exploiting CVE-2026-33032, a critical remote takeover vulnerability in the Nginx UI management tool.