CVE-2024-29296

CVE-2024-29296 - Portainer CE 2.19.4의 사용자 열거 Portainer CE 2.19.4에서 사용자 열거 취약점이 발견되었습니다. 이 문제는 사용자 인증 과정에서 발생하며, 응답 시간의 차이로 인해 원격의 인증되지 않은 사용자가 사용자 이름의 유효성을 확인할 수 있습니다. 이 취약점은 Portainer의 이슈 11736에서 수정되었으며, Portainer CE 버전 2.19.5 및 2.20.2에 포함되었습니다. 요약 취약점: 사용자 열거 제품 공급업체: Portainer 영향을 받는 제품 코드 베이스...

CVE-2026-44881_exploit

CVE-2026-44881 — Lien symbolique Git dans Portainer → Lecture arbitraire de fichiers hôte Exploit en un seul script pour CVE-2026-44881 , une injection de lien symbolique Git dans le flux de déploiement de stack de Portainer qui permet à tout utilisateur authentifié à faibles privilèges ayant des...

ROS-20260818-73-0010

The vulnerability in portainer-ce is related to the tracking of symbolic links. Exploiting this vulnerability can allow an attacker to increase their privileges...

ROS-20260813-73-0054

The vulnerability in portainer-ce is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain increased privileges...

ROS-20260813-73-0002

The vulnerability in Portainer-Ce is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

CVE-2026-72533

An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged users to bypass Docker proxy authorization checks via non-canonical URL normalization, defeating all authorization middleware. The proxy endpoint fails to normalize request paths before...

EUVD-2026-56003

An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged users to bypass Docker proxy authorization checks via non-canonical URL normalization, defeating all authorization middleware. The proxy endpoint fails to normalize request paths before...

CVE-2026-72533 Portainer Portainer CE - Authentication Bypass

An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged users to bypass Docker proxy authorization checks via non-canonical URL normalization, defeating all authorization middleware. The proxy endpoint fails to normalize request paths before...

CVE-2026-72533 Portainer Portainer CE - Authentication Bypass

An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged users to bypass Docker proxy authorization checks via non-canonical URL normalization, defeating all authorization middleware. The proxy endpoint fails to normalize request paths before...

CVE-2026-72533

The CVE concerns Portainer CE (up to 2.44.0) with an authentication bypass in the Docker proxy path validation. Authenticated low-privilege users can bypass proxy authorization checks through non-canonical URL normalization, causing the proxy and authorization layer to interpret crafted requests ...

PT-2026-70108

An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged users to bypass Docker proxy authorization checks via non-canonical URL normalization, defeating all authorization middleware. The proxy endpoint fails to normalize request paths before...

ROS-20260713-73-0002

The vulnerability in Portainer-Ce is related to the incorrect implementation of the authentication algorithm. Exploiting this vulnerability allows an attacker who operates remotely to bypass security restrictions and gain unauthorized access to protected information...

ROS-20260709-73-0028

The vulnerability in Portainer-Ce is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260709-73-0025

The vulnerability in Portainer-CE is related to the execution of operations outside the buffer in memory. The vulnerability can be exploited remotely...

ROS-20260709-73-0030

The vulnerability in Portainer-Ce is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker who operates remotely to gain unauthorized access to protected information...

ROS-20260605-73-0020

The vulnerability in Portainer-Ce relates to the disclosure of information through query strings. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260605-73-0021

The vulnerability in Portainer-Ce is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260605-73-0022

The vulnerability in Portainer-Ce is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260605-73-0023

The vulnerability in Portainer-Ce is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260529-73-0009

The vulnerability in Portainer-Ce is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...