CVE-2026-72901 - dokploy An authenticated user can run commands on the Dokploy server with root privileges. This is a serious security risk because it allows an attacker to take control of the server. To fix this… Too many irrelevant or confusing CVEs? Use stackflag.com
CVE-2026-72902 - dokploy Dokploy, a self-hosted Platform as a Service, had a security issue that allowed an authenticated user to execute commands on a server. This means an attacker could gain access to sensitive… Too many irrelevant or confusing CVEs? Use stackflag.com
CVE-2026-72886 - dokploy A security flaw in Dokploy allowed non-admin users to gain root access on the host by exploiting a scheduling feature. This could have allowed unauthorized users to execute malicious scripts… Too many irrelevant or confusing CVEs? Use stackflag.com
CVE-2026-72882 - dokploy Dokploy's web interface allows attackers to run commands on remote servers if they have the ability to create or update file mounts. This can happen if an attacker has an account on the… Too many irrelevant or confusing CVEs? Use stackflag.com
CVE-2026-72880 - dokploy Dokploy's self-hosted Platform as a Service (PaaS) has a security issue that allows an authenticated user to write files outside the intended directory or run unauthorized system commands.… Too many irrelevant or confusing CVEs? Use stackflag.com
CVE-2026-72878 - dokploy Dokploy's backup and restore feature allows an attacker with admin access to inject malicious commands that can execute on the host machine, potentially leading to unauthorized access or data… Too many irrelevant or confusing CVEs? Use stackflag.com
CVE-2026-72879 - dokploy Dokploy's self-hosted Platform as a Service (PaaS) is affected. An attacker with access to a project can use malicious registry credentials to execute arbitrary commands on the server,… Too many irrelevant or confusing CVEs? Use stackflag.com
CVE-2026-72876 - dokploy Dokploy's self-hosted servers allow a malicious tenant with server access to execute arbitrary commands on another tenant's server. This is a serious security risk, as it could allow… Too many irrelevant or confusing CVEs? Use stackflag.com
CVE-2026-72869 - dokploy A security issue in Dokploy allows an authenticated user to execute arbitrary commands on the host machine. This can happen if the user has permission to restore backups and supplies a… Too many irrelevant or confusing CVEs? Use stackflag.com
CVE-2026-72872 - dokploy Dokploy's self-hosted Platform as a Service allows unauthorized users with deployment permissions to run arbitrary system commands on the host or target server. This is fixed in version… Too many irrelevant or confusing CVEs? Use stackflag.com
CVE-2026-72867 - dokploy Dokploy users who haven't updated to version 0.29.13 are at risk of malicious branch names being used to execute arbitrary commands on their server. This could allow an attacker to take… Too many irrelevant or confusing CVEs? Use stackflag.com
CVE-2026-72868 - dokploy Dokploy users are at risk of a security breach if an attacker gains access to a low-privileged organization member's account. This can happen if an attacker is able to manipulate certain… Too many irrelevant or confusing CVEs? Use stackflag.com
CVE-2026-72864 - dokploy Dokploy, a self-hosted Platform as a Service, has a security issue that allows any authenticated user to access and control any container on your server. This is a serious risk because it… Too many irrelevant or confusing CVEs? Use stackflag.com
CVE-2026-72865 - dokploy An authenticated user with certain permissions can execute arbitrary system commands on the Dokploy server. This can allow them to delete or modify files, or even take control of the server.… Too many irrelevant or confusing CVEs? Use stackflag.com
CVE-2026-72863 - dokploy Dokploy's in-app terminals and log streamers don't check user permissions. This allows a user with limited access to gain full control of the Docker host, including becoming the root user.… Too many irrelevant or confusing CVEs? Use stackflag.com
CVE-2026-72738 - dokploy An authenticated user with backup access can execute arbitrary commands on the Dokploy server. This can lead to data loss or system compromise. Update to version 0.29.13 or later to fix this… Too many irrelevant or confusing CVEs? Use stackflag.com
CVE-2026-72736 - dokploy Dokploy, a self-hosted Platform as a Service, had a security issue where an attacker could potentially run malicious code on the host server. This was fixed in version 0.29.13, so update to… Too many irrelevant or confusing CVEs? Use stackflag.com
CVE-2026-72737 - dokploy Dokploy's backup feature in versions 0.29.8 and earlier allows an authenticated user with backup permissions to access another organization's AWS credentials, read their backups, or redirect… Too many irrelevant or confusing CVEs? Use stackflag.com
CVE-2026-72733 - dokploy Dokploy's database restore feature allows authenticated users with permission to execute arbitrary commands on the server. This could lead to unauthorized access or data loss. Update to… Too many irrelevant or confusing CVEs? Use stackflag.com
CVE-2026-72735 - dokploy Dokploy's remote server management feature allows unauthorized commands to be executed on remote servers with the configured SSH user's privileges. This is due to an incomplete fix for a… Too many irrelevant or confusing CVEs? Use stackflag.com