CVE-2026-72736

creationtimestamp| type| source ---|---|--- 2026-08-10 18:08:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msqoy6kzx22b...

CVE-2026-72736 Dokploy: OS Command Injection in registry credential testing and Swarm cluster management → HOST RCE

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, Dokploy passes user-controlled values directly into shell commands via unquoted template literal interpolation in the registry credential testing and Docker Swarm cluster management endbpoints. Both endpoints have a sa...