Lucene search
+L

6417 matches found

OSV
OSV
added 2026/08/10 6:31 p.m.15 views

CVE-2026-72864 Dokploy Broken Access Control on docker-container-terminal WebSocket (Member -> Root in Arbitrary Containers)

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, the local branch of /docker-container-terminal in apps/dokploy/server/wss/docker-container-terminal.ts authenticates with validateRequest but does not authorize the attacker-controlled containerId against the caller's...

9.9CVSS5.5AI score
SaveExploits0References5
CVE
CVE
added 2026/08/10 6:31 p.m.26 views

CVE-2026-72864

CVE-2026-72864 affects Dokploy (= 0.29.13 or apply vendor-provided fixes. If present, references include Dokploy advisories and release notes.

9.9CVSS5.5AI score0.00274EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/08/10 6:28 p.m.8 views

CVE-2026-72863

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, Dokploy's WebSocket handlers in-app terminals and log streamers authenticate the session but never authorize it. They establish who the user is via validateRequest and then proceed without consulting the role/permissio...

9.9CVSS5.3AI score0.00298EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2026/08/10 6:28 p.m.26 views

CVE-2026-72863 Dokploy: Missing authorization in WebSocket handlers allows a low-privilege member to gain root on the Docker host

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, Dokploy's WebSocket handlers in-app terminals and log streamers authenticate the session but never authorize it. They establish who the user is via validateRequest and then proceed without consulting the role/permissio...

9.9CVSS0.00298EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/10 6:28 p.m.45 views

CVE-2026-72863

Dokploy before 0.29.13 has a missing authorization check in WebSocket handlers (in-app terminals and log streamers) that authenticate a session but do not enforce role-based access. Any authenticated user can open an interactive shell into any container on the host (including the Dokploy containe...

9.9CVSS5.4AI score0.00298EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/10 6:28 p.m.11 views

CVE-2026-72863 Dokploy: Missing authorization in WebSocket handlers allows a low-privilege member to gain root on the Docker host

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, Dokploy's WebSocket handlers in-app terminals and log streamers authenticate the session but never authorize it. They establish who the user is via validateRequest and then proceed without consulting the role/permissio...

9.9CVSS5.4AI score
SaveExploits0References5
NVD
NVD
added 2026/08/10 9:17 a.m.10 views

CVE-2026-66411

DEEBOT PRO M1 and DEEBOT PRO K1VAC incorrectly implement authentication algorithm in Websocket communications. An unauthenticated attacker may connect and operate the affected robot...

6.9CVSS0.0039EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/10 8:13 a.m.9 views

EUVD-2026-55118

DEEBOT PRO M1 and DEEBOT PRO K1VAC incorrectly implement authentication algorithm in Websocket communications. An unauthenticated attacker may connect and operate the affected robot...

6.9CVSS7.4AI score0.0039EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/08/10 8:13 a.m.14 views

CVE-2026-66411

DEEBOT PRO M1 and DEEBOT PRO K1VAC incorrectly implement authentication algorithm in Websocket communications. An unauthenticated attacker may connect and operate the affected robot...

6.9CVSS7.4AI score0.0039EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/10 8:13 a.m.36 views

CVE-2026-66411

DEEBOT PRO M1 and DEEBOT PRO K1VAC incorrectly implement authentication algorithm in Websocket communications. An unauthenticated attacker may connect and operate the affected robot...

6.9CVSS0.0039EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/10 8:13 a.m.56 views

CVE-2026-66411

The CVE-2026-66411 entry concerns DEEBOT PRO M1 and DEEBOT PRO K1VAC, where the WebSocket authentication implementation is incorrect (CWE-303). An unauthenticated attacker may connect to and operate the affected robot. Documented impact includes potential unauthorized control of the device, with ...

6.9CVSS7.4AI score0.0039EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/08/10 8:0 a.m.10 views

CVE-2026-66407

DEEBOT PRO M1 and DEEBOT PRO K1VAC improperly implement authentication in WebSocket communication. The WebSocket private key may be retrieved through analyzing the traffic data via a man-in-the-middle attack, and communication contents may be altered...

8.1CVSS7.3AI score0.00329EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/10 8:0 a.m.37 views

CVE-2026-66407

DEEBOT PRO M1 and DEEBOT PRO K1VAC improperly implement authentication in WebSocket communication. The WebSocket private key may be retrieved through analyzing the traffic data via a man-in-the-middle attack, and communication contents may be altered...

8.1CVSS0.00329EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/10 8:0 a.m.10 views

EUVD-2026-55114

DEEBOT PRO M1 and DEEBOT PRO K1VAC improperly implement authentication in WebSocket communication. The WebSocket private key may be retrieved through analyzing the traffic data via a man-in-the-middle attack, and communication contents may be altered...

8.1CVSS7.3AI score0.00329EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/10 8:0 a.m.63 views

CVE-2026-66407

CVE-2026-66407 affects DEEBOT PRO M1 and PRO K1VAC, where authentication in WebSocket communications is improperly implemented. According to sources, the WebSocket private key may be retrieved via a man-in-the-middle analysis of traffic, allowing an attacker to analyze and potentially alter commu...

8.1CVSS7.3AI score0.00329EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/08/10 2:56 a.m.9 views

undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames

A flaw was found in undici. A malicious WebSocket server can exploit this by streaming numerous small or empty continuation frames. This can bypass per-frame and cumulative-size validation, leading to unbounded memory growth in the client process. The primary consequence is memory exhaustion,...

7.5CVSS6AI score0.00789EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/10 12:0 a.m.5 views

PT-2026-69987

Name of the Vulnerable Software and Affected Versions Rocket.Chat versions prior to 7.10.14 Rocket.Chat versions prior to 8.0.8 Rocket.Chat versions prior to 8.1.7 Rocket.Chat versions prior to 8.2.7 Rocket.Chat versions prior to 8.3.7 Rocket.Chat versions prior to 8.4.5 Rocket.Chat versions prio...

5.4CVSS5.3AI score0.002EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/07 7:14 a.m.38 views

CVE-2026-16027 Unauthenticated WebSocket-to-XAdES SSRF in Revenue Administration's E-Signature

Server-Side request forgery SSRF vulnerability in Revenue Administration Türkiye's E-Signature allows Server Side Request Forgery. This issue affects Türkiye's E-Signature: from 2.4.4.0 before 2.5.1.0...

5.4CVSS0.00183EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/07 7:14 a.m.51 views

CVE-2026-16027

CVE-2026-16027 : An unauthenticated SSRF exists in Türkiye’s E-Signature (from 2.4.4.0 up to before 2.5.1.0). The issue allows server-side requests initiated by the service, with CVSS v3.1 base score 5.4 (Network attack vector, Low complexity, No privileges, User interaction required; Confidentia...

5.4CVSS5.2AI score0.00183EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/07 6:59 a.m.7 views

OESA-2026-3279 python-aiohttp security update

Async http client/server framework asyncio. Security Fixes: AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the WebSocket client accepts and decompresses frames with the RSV1 bit set even when the permessage-deflate extension was not negotiated,...

6.9CVSS5.3AI score0.00302EPSS
SaveExploits0References2
Rows per page
Query Builder