CVE-2026-72883

creationtimestamp| type| source ---|---|--- 2026-08-10 21:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msqymrlwos23...

CVE-2026-72883

CVE-2026-72883 affects Dokploy (PaaS) prior to version 0.29.13. The WebSocket handlers in wss/terminal.ts, wss/docker-container-terminal.ts, wss/docker-container-logs.ts, and wss/docker-stats.ts validate organization membership but do not enforce checkServiceAccess, accessedServerIds, or accessed...