Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
8.1 HIGH
CVE-2026-15467 — Trustyai-service-operator: trustyai-service-operator: lmevaljob sidecar containers bypass…

A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can exploit this vulnerability by configuring a sidecar container to bypass existing…

openshift_ai | Remote | Authorization
Aug 10, 2026 Aug 27, 2026
Aug 10, 2026
Aug 27, 2026
9.9 CRITICAL
CVE-2026-14450 — Maas-billing: maas api: privilege escalation via forged http headers due to missing authe…

A flaw was found in the MaaS API. This vulnerability allows any pod within the cluster to bypass the Kuadrant AuthPolicy gateway by forging HTTP headers, specifically `X-MaaS-Username` and `X-MaaS-Gr…

openshift_ai | Remote | Authentication
Aug 10, 2026 Aug 27, 2026
Aug 10, 2026
Aug 27, 2026
8.8 HIGH
CVE-2026-13717 — Rhoai maas: llm-d: maas/llm-d inference gateway: default allowedroutes.namespaces.from: a…

A flaw was found in the Red Hat OpenShift AI (RHOAI) MaaS Gateway. Improper configuration of the Gateway in a model-serving context allows a standard user with low privileges to intercept, read, log,…

openshift_ai | Remote | Misconfiguration
Aug 10, 2026 Aug 27, 2026
Aug 10, 2026
Aug 27, 2026
7.5 HIGH
CVE-2026-11810 — NULL-pointer dereference in UpdateHub OTA agent on empty inner metadata array (remote DoS)

The UpdateHub firmware-update agent's probe handler (z_impl_updatehub_probe() in subsys/mgmt/updatehub/updatehub.c) parses the JSON metadata returned by the update server into a fixed two-level neste…

zephyr zephyr | Denial of Service
Aug 10, 2026 Aug 26, 2026
Aug 10, 2026
Aug 26, 2026
3.7 LOW
CVE-2026-11809 — UpdateHub probe: uninitialized-heap out-of-bounds read of network-supplied metadata

The UpdateHub OTA client in subsys/mgmt/updatehub/updatehub.c contains an out-of-bounds / uninitialized-memory read in z_impl_updatehub_probe(). The probe response from the UpdateHub server is copied…

zephyr zephyr | Memory Corruption
Aug 10, 2026 Aug 26, 2026
Aug 10, 2026
Aug 26, 2026
9.9 CRITICAL
CVE-2026-72902 — Dokploy: Authenticated RCE via Command Injection in registry.testRegistry / registry.test…

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, Dokploy allows an authenticated user to execute arbitrary commands on a local or SSH-connected target server because r…

dokploy | Remote | Injection
Aug 10, 2026 Sep 08, 2026
Aug 10, 2026
Sep 08, 2026
9.9 CRITICAL
CVE-2026-72901 — Dokploy: Remote Code Execution via volume-backup

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, Dokploy allows an authenticated low-privilege member to execute arbitrary commands on the control-plane host because t…

dokploy | Remote | Injection
Aug 10, 2026 Sep 08, 2026
Aug 10, 2026
Sep 08, 2026
9.9 CRITICAL
CVE-2026-72886 — Dokploy: Non-admin member gains root on the host by bypassing the owner/admin check on se…

Dokploy is a free, self-hostable Platform as a Service (PaaS). From 0.29.2 until 0.29.13, schedule.create and schedule.update in apps/dokploy/server/api/routers/schedule.ts derive serviceId from appl…

dokploy | Remote | Authorization
Aug 10, 2026 Sep 08, 2026
Aug 10, 2026
Sep 08, 2026
0.0 NONE
CVE-2026-72885 — Dokploy: Authenticated Command Injection in Dokploy Dockerfile Builder

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, dockerContextPath accepted by apps/dokploy/components/dashboard/application/build/show.tsx flows through getDockerCont…

dokploy | Remote | Injection
Aug 10, 2026 Sep 08, 2026
Aug 10, 2026
Sep 08, 2026
8.7 HIGH
CVE-2026-72884 — Dokploy: Command Injection via Compose Custom Command

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, sanitizeCommand in packages/server/src/utils/builders/compose.ts only trims whitespace and strips surrounding quotes f…

dokploy | Remote | Injection
Aug 10, 2026 Sep 08, 2026
Aug 10, 2026
Sep 08, 2026
8.8 HIGH
CVE-2026-72883 — Dokploy: WebSocket Terminal Missing Service-Level Access Control

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the WebSocket handlers in apps/dokploy/server/wss/terminal.ts, apps/dokploy/server/wss/docker-container-terminal.ts, a…

dokploy | Remote | Authorization
Aug 10, 2026 Sep 08, 2026
Aug 10, 2026
Sep 08, 2026
9.9 CRITICAL
CVE-2026-72882 — Dokploy: Authenticated blind command injection via file mounts leads to direct remote hos…

Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.28.8 and earlier, an authenticated user who can create or update file mounts for a service can inject shell metacharacters into fil…

dokploy | Remote | Injection
Aug 10, 2026 Sep 08, 2026
Aug 10, 2026
Sep 08, 2026
6.4 MEDIUM
CVE-2026-72881 — Dokploy: Command Injection via database credentials in backup/restore commands

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, database backup and restore command builders in packages/server/src/utils/backups/utils.ts and packages/server/src/uti…

dokploy | Remote | Injection
Aug 10, 2026 Sep 08, 2026
Aug 10, 2026
Sep 08, 2026
9.9 CRITICAL
CVE-2026-72880 — Dokploy: Arbitrary File Write + Remote OS Command Injection via `certificatePath`

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the apiCreateCertificate schema in packages/server/src/db/schema/certificate.ts accepts a client-supplied certificateP…

dokploy | Remote | Path Traversal
Aug 10, 2026 Sep 08, 2026
Aug 10, 2026
Sep 08, 2026
9.4 CRITICAL
CVE-2026-72879 — Dokploy: Command Injection via Registry Credentials in Swarm Upload

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.8, the getRegistryCommands() function in packages/server/src/utils/cluster/upload.ts interpolates registry.password and re…

dokploy | Remote | Injection
Aug 10, 2026 Sep 08, 2026
Aug 10, 2026
Sep 08, 2026
9.6 CRITICAL
CVE-2026-72878 — Dokploy: OS Command Injection in backup/restore pipeline via unescaped user-controlled sh…

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, Dokploy's backup and restore pipeline constructs shell commands by directly interpolating user-controlled database fie…

dokploy | Remote | Injection
Aug 10, 2026 Sep 08, 2026
Aug 10, 2026
Sep 08, 2026
9.6 CRITICAL
CVE-2026-72877 — Dokploy: Command Injection via dockerImage in buildRemoteDocker

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the dockerImage field is interpolated without quoting into shell commands in buildRemoteDocker() in packages/server/sr…

dokploy | Remote | Injection
Aug 10, 2026 Sep 08, 2026
Aug 10, 2026
Sep 08, 2026
9.9 CRITICAL
CVE-2026-72876 — Dokploy: Cross-organization IDOR leads to root RCE on another tenant's server via swarm.*

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, swarm.getNodes, swarm.getNodeInfo, swarm.getNodeApps, and swarm.getAppInfos in apps/dokploy/server/api/routers/swarm.t…

dokploy | Remote | Authorization
Aug 10, 2026 Sep 08, 2026
Aug 10, 2026
Sep 08, 2026
8.8 HIGH
CVE-2026-72875 — Dokploy: Remote Code Execution (RCE) via Command Injection in settings.readTraefikFile

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, settings.readTraefikFile in apps/dokploy/server/api/routers/settings.ts passes a path accepted by apiReadTraefikConfig…

dokploy | Remote | Injection
Aug 10, 2026 Sep 08, 2026
Aug 10, 2026
Sep 08, 2026
8.7 HIGH
CVE-2026-72874 — Dokploy: Command Injection via Unescaped Git URL in Clone Commands

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, cloneGitRepository in packages/server/src/utils/providers/git.ts interpolates customGitUrl and customGitBranch into a …

dokploy | Remote | Injection
Aug 10, 2026 Sep 08, 2026
Aug 10, 2026
Sep 08, 2026
Showing 20 of 13969 Results