Vulnerabilities in Portainer

11 results

Vexday analysis

Portainer apresenta perfil de risco baixo com apenas 1 vulnerabilidade registrada, sem indicadores de exploração ativa ou severidade crítica. A fraqueza identificada (CWE-276 - Permissões inadequadas) é recente, publicada nos últimos 90 dias, e requer atenção para validação e remediação, mas não representa ameaça imediata.

CVE-2026-44885MEDIUMPortainer: Path traversal in backup archive extraction allows arbitrary file writeEPSS 0.6%CVE-2026-33590HIGHInsecure default permissions in Portainer CEEPSS 0.5%CVE-2026-44881HIGHPortainer: Arbitrary File Read via Git Symlink Injection in Stack Auto-UpdateEPSS 0.4%CVE-2025-49593MEDIUMPortainer HTTP Headers May Leak to Malicious Container RegistriesEPSS 0.3%CVE-2026-44849CRITICALPortainer: Endpoint security bypass via Swarm service create/updateEPSS 0.3%CVE-2026-44882HIGHPortainer: Kubernetes middleware continues after token validation failure, bypassing endpoint authorizationEPSS 0.3%CVE-2026-44848CRITICALPortainer: Missing authorization on Docker plugin endpoints allows host RCEEPSS 0.3%CVE-2026-44883HIGHPortainer: JWT accepted in URL query leaks tokens to logs and referersEPSS 0.3%CVE-2026-55761HIGHPortainer: Unauthenticated Restore Endpoint Allows Admin Takeover on Uninitialised Portainer InstancesEPSS 0.3%CVE-2026-44884MEDIUMPortainer: Missing authorization on custom template file endpoint exposes template contentEPSS 0.3%CVE-2026-44850HIGHPortainer: Bind-mount restriction bypass via HostConfig.MountsEPSS 0.2%