Lucene search
K

EUVD-2026-33062

๐Ÿ—“๏ธย 28 May 2026ย 21:03:16Reported byย EUVDTypeย 
euvd
ย euvd
๐Ÿ”—ย euvd.enisa.europa.eu๐Ÿ‘ย 10ย Views

Portainer CE allowed non-admins to mount host paths via HostConfig.Mounts; fixed in 2.33.8, 2.39.2, 2.41.0.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2026-44850
28 May 202621:03
โ€“attackerkb
Circl
CVE-2026-44850
28 May 202623:00
โ€“circl
CNNVD
Portainer ๅฎ‰ๅ…จๆผๆดž
28 May 202600:00
โ€“cnnvd
CVE
CVE-2026-44850
28 May 202621:03
โ€“cve
Cvelist
CVE-2026-44850 Portainer: Bind-mount restriction bypass via HostConfig.Mounts
28 May 202621:03
โ€“cvelist
Github Security Blog
Portainer has a bind-mount restriction bypass via HostConfig.Mounts
14 May 202616:23
โ€“github
NVD
CVE-2026-44850
28 May 202622:16
โ€“nvd
OSV
GHSA-7FW3-X4R2-G7WC Portainer has a bind-mount restriction bypass via HostConfig.Mounts
14 May 202616:23
โ€“osv
Positive Technologies
PT-2026-41140
14 May 202600:00
โ€“ptsecurity
RedhatCVE
CVE-2026-44850
5 Jun 202619:12
โ€“redhatcve
Rows per page
[
  {
    "enisaIdVendor": [
      {
        "id": "8a01761a-ecd3-3197-91a3-312af9445ebe",
        "vendor": {
          "name": "portainer"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "560a0b46-925d-3afe-baea-f55ae6b3a5ec",
        "product": {
          "name": "portainer",
          "vendor": {
            "name": "portainer"
          }
        },
        "product_version": "2.40.0, < 2.41.0"
      },
      {
        "id": "863cff56-049d-3525-83f7-622e6133a7e4",
        "product": {
          "name": "portainer",
          "vendor": {
            "name": "portainer"
          }
        },
        "product_version": "2.39.0, < 2.39.2"
      },
      {
        "id": "b72c7eb7-7303-3ea9-89de-d773a3d94c10",
        "product": {
          "name": "portainer",
          "vendor": {
            "name": "portainer"
          }
        },
        "product_version": "2.33.0, < 2.33.8"
      }
    ]
  }
]

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

28 May 2026 21:03Current
5.8Medium risk
Vulners AI Score5.8
CVSS 3.18.5
EPSS0.0018
10