11196 matches found
PT-2026-66782
Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.12.3, config. placeholders in egg configuration-file templates allow a low-privileged user to read config.token, config.token id, and config.docker.registries from the full daemon...
CVE-2026-67208
Juggle through 1.6.0 contains a remote code execution vulnerability that allows unauthenticated remote attackers to execute arbitrary OS commands by connecting to the exposed H2 database web console using default shipped credentials. Attackers can access the unprotected /h2-console endpoint,...
CVE-2026-67208 Juggle 1.6.0 Unauthenticated RCE via Exposed H2 Console
Juggle through 1.6.0 contains a remote code execution vulnerability that allows unauthenticated remote attackers to execute arbitrary OS commands by connecting to the exposed H2 database web console using default shipped credentials. Attackers can access the unprotected /h2-console endpoint,...
CVE-2026-67208
CVE-2026-67208 – Juggle 1.6.0 exposes an unauthenticated remote code execution via the exposed H2 database web console. An attacker can reach the unprotected /h2-console endpoint, authenticate with default shipped credentials, and use the H2 CREATE ALIAS Runtime.exec() technique to execute arbitr...
EUVD-2026-51278
Juggle through 1.6.0 contains a remote code execution vulnerability that allows unauthenticated remote attackers to execute arbitrary OS commands by connecting to the exposed H2 database web console using default shipped credentials. Attackers can access the unprotected /h2-console endpoint,...
SUSE CVE-2026-39386
Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC In versions 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1, any authenticated user can immediately obtain full administrative control of the entire Neko instance member management, room settings, broadcast control, session...
SUSE CVE-2026-40893
Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.31.0, Gotenberg only checks if the tag is exactly FileName, so System:FileName slips right through and ExifTool happily renames the file. This allows remote attackers to move, rename, and change permissions for arbitrary files...
SUSE CVE-2026-44848
Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33.8, 2.39.2, and 2.41.0, The Docker plugin management endpoints /plugins/ were not registered...
SUSE CVE-2026-47125
Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.19.2, the PUT /api/environments/id/templates/variables endpoint, which writes the system-wide .env.global file used for variable substitution in every project's compose file, is missing an admin...
SUSE CVE-2026-47179
Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.19.4, ProjectService.GetProjectFileContent returns the contents of any Docker Compose include directive declared in a project's compose file before any path-traversal validation runs. Because...
SUSE CVE-2026-55229
Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.34.0, Gotenberg's /forms/libreoffice/convert endpoint allows a specially crafted document to cause LibreOffice to automatically retrieve external HTTPS resources and local file resources during document conversion, enabling bli...
CLEANSTART-2026-DZ08128 Security fixes in docker 18.09.7-r0
Package docker version 18.09.7-r0 fixes 1 vulnerabilities: CVE-2018-15664...
CLEANSTART-2026-RV33576 Security fixes in docker-fips 20.10.14-r0
Package docker-fips version 20.10.14-r0 fixes 1 vulnerabilities: CVE-2022-24769...
CLEANSTART-2026-JP18205 Security fixes in docker 20.10.20-r0
Package docker version 20.10.20-r0 fixes 1 vulnerabilities: CVE-2022-39253...
CLEANSTART-2026-GX16359 Security fixes in confluent-common-docker 7.6.9-r3
Package confluent-common-docker version 7.6.9-r3 fixes 4 vulnerabilities: CVE-2025-11226, CVE-2026-1225, ghsa-25qh-j22f-pwp8, ghsa-qqpg-mvqg-649v...
CLEANSTART-2026-MI17350 Security fixes in docker-fips 20.10.9-r0
Package docker-fips version 20.10.9-r0 fixes 3 vulnerabilities: CVE-2021-41089, CVE-2021-41091, CVE-2021-41092...
CLEANSTART-2026-OG80710 Security fixes in docker 20.10.11-r0
Package docker version 20.10.11-r0 fixes 1 vulnerabilities: CVE-2021-41190...
CLEANSTART-2026-KF39510 Security fixes in confluent-common-docker 7.6.9-r5
Package confluent-common-docker version 7.6.9-r5 fixes 2 vulnerabilities: ghsa-rwm7-x88c-3g2p, CVE-2026-42577...