EUVD-2026-41405

Dockwatch through 0.6.567 contains an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary shell commands by exploiting a missing exit after an authentication redirect in loader.php combined with unsanitized input passed to shellexec in...

CVE-2026-58455

Dockwatch prior to 0.6.568 is affected by an unauthenticated OS command injection due to a missing exit() after an authentication redirect in loader.php and unsanitized input in ajax/compose.php, enabling attackers to seed a session flag and inject commands via composePath in composePull, potenti...