CVE-2024-29296

CVE-2024-29296 - User enumeration on Portainer CE - 2.19.4 A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or...

CVE-2026-44881_exploit

CVE-2026-44881 — Portainer Git Symlink → Arbitrary Host File Read Single-script exploit for CVE-2026-44881 , a Git symlink injection in Portainer's stack-deployment flow that lets any low-privilege authenticated user with stack-creation rights read arbitrary files reachable by the Portainer...

ROS-20260818-73-0009

The vulnerability in Portainer-Ce is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260818-73-0037

The vulnerability in portainer-ce is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260818-73-0011

The vulnerability in Portainer-Ce is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20260818-73-0010

The vulnerability in portainer-ce is related to the tracking of symbolic links. Exploiting this vulnerability can allow an attacker to increase their privileges...

ROS-20260813-73-0054

The vulnerability in portainer-ce is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain increased privileges...

ROS-20260813-73-0002

The vulnerability in Portainer-Ce is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

CVE-2026-72533

An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged users to bypass Docker proxy authorization checks via non-canonical URL normalization, defeating all authorization middleware. The proxy endpoint fails to normalize request paths before...

EUVD-2026-56003

An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged users to bypass Docker proxy authorization checks via non-canonical URL normalization, defeating all authorization middleware. The proxy endpoint fails to normalize request paths before...

CVE-2026-72533 Portainer Portainer CE - Authentication Bypass

An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged users to bypass Docker proxy authorization checks via non-canonical URL normalization, defeating all authorization middleware. The proxy endpoint fails to normalize request paths before...

CVE-2026-72533 Portainer Portainer CE - Authentication Bypass

An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged users to bypass Docker proxy authorization checks via non-canonical URL normalization, defeating all authorization middleware. The proxy endpoint fails to normalize request paths before...

CVE-2026-72533

The CVE concerns Portainer CE (up to 2.44.0) with an authentication bypass in the Docker proxy path validation. Authenticated low-privilege users can bypass proxy authorization checks through non-canonical URL normalization, causing the proxy and authorization layer to interpret crafted requests ...

PT-2026-70108

An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged users to bypass Docker proxy authorization checks via non-canonical URL normalization, defeating all authorization middleware. The proxy endpoint fails to normalize request paths before...

ROS-20260713-73-0002

The vulnerability in Portainer-Ce is related to the incorrect implementation of the authentication algorithm. Exploiting this vulnerability allows an attacker who operates remotely to bypass security restrictions and gain unauthorized access to protected information...

ROS-20260709-73-0025

The vulnerability in Portainer-CE is related to the execution of operations outside the buffer in memory. The vulnerability can be exploited remotely...

ROS-20260709-73-0028

The vulnerability in Portainer-Ce is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260709-73-0030

The vulnerability in Portainer-Ce is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker who operates remotely to gain unauthorized access to protected information...

ROS-20260605-73-0020

The vulnerability in Portainer-Ce relates to the disclosure of information through query strings. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260605-73-0021

The vulnerability in Portainer-Ce is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...