CVE Find : surveillez les vulnérabilités en temps réel

CVE-2026-7786 - CRITICAL
29/05/2026

Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter device firmware contains plaintext administrative credentials embedded in the firmware image. These credentials can be extracted through firmware analysis and used to authenticate to device services.

OWSAP: A07

Plus d'informations avec CVE Find

CVE-2026-6824 - HIGH
29/05/2026

A stored cross-site scripting (XSS) vulnerability exists in certain 1xxx series NVR devices due to insufficient sanitization of user-supplied input in specific functional modules. Attackers can inject malicious scripts, which are then persistently stored on the device backend. When administrators or users access affected pages, the stored scripts are executed in their browsers, leading to potentia...

crosssitescriptingOWSAP: A03

Plus d'informations avec CVE Find

CVE-2026-5768 - HIGH
29/05/2026

The Frontier X2 device allows unauthenticated BLE read/write access to critical GATT characteristics without enforcing pairing authentication or authorization. This allows attackers within BLE range to perform unauthorized control of device functions, including starting/stopping activities, triggering vibrations, causing denial-of-service conditions, and fuzzing characteristic values to induce une...

authorisationproblemOWSAP: A07

Plus d'informations avec CVE Find

CVE-2026-5386 - CRITICAL
29/05/2026

The affected KMW CCTV Security Cameras are vulnerable to a critical unauthenticated password reset. This flaw allows an attacker to remotely reset the administrator password to a known value without authentication, granting full access to the camera feeds and settings.

OWSAP: A07

Plus d'informations avec CVE Find

CVE-2026-47125 - HIGH
29/05/2026

Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.19.2, the PUT /api/environments/{id}/templates/variables endpoint, which writes the system-wide .env.global file used for variable substitution in every project's compose file, is missing an admin authorization check. Any authenticated non-admin user can call this endpoint with their bearer token or AP...

authorisationproblemOWSAP: A01

Plus d'informations avec CVE Find

CVE-2026-45661 - CRITICAL
29/05/2026

Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.26.5 and earlier, a critical path traversal vulnerability exists in Dokploy v0.26.5 that allows authenticated users to write arbitrary files to the filesystem during application deployment. When combined with Dokploy's remote server deployment feature, this vulnerability enables arbitrary file write to remote server filesystems, a...

directorytraversalOWSAP: A01

Plus d'informations avec CVE Find

CVE-2026-45633 - CRITICAL
29/05/2026

Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.26.6 and earlier, Dokploy contains a command injection vulnerability in the /docker-container-logs WebSocket endpoint. The tail and since parameters are not validated and are directly concatenated into shell commands, allowing authenticated users to execute arbitrary commands with root privileges.

oscommandinjectionOWSAP: A03

Plus d'informations avec CVE Find

CVE-2026-45632 - CRITICAL
29/05/2026

Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.26.7 and earlier, the schedule router does not enforce organization/role checks. As a result, any authenticated user can create, update, run, or delete schedules belonging to other organizations if they know the scheduleId/serverId. Schedule types server and dokploy-server write and execute scripts on the host or remote servers, e...

oscommandinjectionpriviliegemanagementauthorisationproblemOWSAP: A03OWSAP: A04OWSAP: A01

Plus d'informations avec CVE Find

CVE-2026-45631 - CRITICAL
29/05/2026

Dokploy is a free, self-hostable Platform as a Service (PaaS). From 0.27.0 to before 0.29.3, a hardcoded BETTER_AUTH_SECRET fallback ("better-auth-secret-123456789") lets an unauthenticated attacker forge email verification JWTs, trigger auto-sign-in as admin, and execute commands on the host via the built-in SSH terminal. This vulnerability is fixed in 0.29.3.

OWSAP: A07

Plus d'informations avec CVE Find

CVE-2026-45630 - CRITICAL
29/05/2026

Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.28.8 and earlier, authenticated OS command injection in the application.updateTraefikConfig tRPC endpoint allows admin/owner users to execute arbitrary system commands on remote servers via unsanitized echo shell interpolation.

oscommandinjectionOWSAP: A03

Plus d'informations avec CVE Find

CVE-2026-45629 - CRITICAL
29/05/2026

Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.28.8 and earlier, authenticated OS command injection in the /listen-deployment WebSocket endpoint allows any organization member to execute arbitrary system commands on remote servers managed by Dokploy, leading to full server compromise.

oscommandinjectionOWSAP: A03

Plus d'informations avec CVE Find

CVE-2026-45628 - CRITICAL
29/05/2026

Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.29.2 and earlier, Dokploy constructs shell commands using JavaScript template literals and executes them via child_process.exec() (which runs through /bin/sh -c). User-supplied branch names, repository URLs, and Docker credentials are interpolated directly into these commands without escaping. This requires an authenticated user w...

commandinjectionOWSAP: A03

Plus d'informations avec CVE Find

CVE-2026-45627 - HIGH
29/05/2026

Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.19.0, the unauthenticated GET /api/app-images/logo endpoint reflects a user-supplied color query parameter into the body of an SVG document via strings.ReplaceAll with no escaping. The substitution lands inside a