Lucene search
+L

1 matches found

Cvelist
Cvelist
•added 2026/06/30 2:36 p.m.•65 views

CVE-2026-27955 Coolify: Command Injection via Single-Quote Breakout in `executeInDocker()`

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.464, the executeInDocker helper wraps commands in bash -c '$command' without escaping single quotes. User-controlled dockercomposecustombuildcommand and...

6.6CVSS0.00396EPSS
SaveExploits0References1
Rows per page
Query Builder