CVE-2026-116070 Docker-Proxy through 5.1.9 Missing Authentication via hubcmdui /api/config

Docker-Proxy through 5.1.9 contains a missing authentication vulnerability in the hubcmdui routes/config.js that allows unauthenticated attackers to read and overwrite configuration via /api/config. Attackers can retrieve the WeChat webhook URL and Telegram bot token, and overwrite menuItems link...

CVE-2026-116070

The Docker-Proxy software (versions through 5.1.9 ) is vulnerable to a missing authentication flaw in the hubcmdui component, specifically within routes/config.js. This vulnerability allows unauthenticated attackers to access the /api/config endpoint to read and overwrite configurations. Practica...