Vulnerabilities in portainer
10 resultsCVE-2026-44885MEDIUMPortainer: Path traversal in backup archive extraction allows arbitrary file writeEPSS 0.6%CVE-2026-33590HIGHInsecure default permissions in Portainer CEEPSS 0.5%CVE-2026-44881HIGHPortainer: Arbitrary File Read via Git Symlink Injection in Stack Auto-UpdateEPSS 0.4%CVE-2026-44849CRITICALPortainer: Endpoint security bypass via Swarm service create/updateEPSS 0.3%CVE-2025-49593MEDIUMPortainer HTTP Headers May Leak to Malicious Container RegistriesEPSS 0.3%CVE-2026-44882HIGHPortainer: Kubernetes middleware continues after token validation failure, bypassing endpoint authorizationEPSS 0.3%CVE-2026-44848CRITICALPortainer: Missing authorization on Docker plugin endpoints allows host RCEEPSS 0.3%CVE-2026-44883HIGHPortainer: JWT accepted in URL query leaks tokens to logs and referersEPSS 0.3%CVE-2026-44884MEDIUMPortainer: Missing authorization on custom template file endpoint exposes template contentEPSS 0.3%CVE-2026-44850HIGHPortainer: Bind-mount restriction bypass via HostConfig.MountsEPSS 0.2%