Vulnerabilities in portainer

11 results

Vexday analysis

Portainer apresenta 10 vulnerabilidades catalogadas, com 9 divulgadas nos últimos 90 dias, indicando ritmo acelerado de descobertas recentes. Embora 2 sejam críticas (CVSS alto), nenhuma está sob exploração ativa conhecida, reduzindo o risco imediato. A fraqueza dominante é autorização inadequada (CWE-862), sugerindo falhas de controle de acesso que exigem atenção em ambientes multi-tenant.

CVE-2026-44885MEDIUMPortainer: Path traversal in backup archive extraction allows arbitrary file writeEPSS 0.6%CVE-2026-33590HIGHInsecure default permissions in Portainer CEEPSS 0.5%CVE-2026-44881HIGHPortainer: Arbitrary File Read via Git Symlink Injection in Stack Auto-UpdateEPSS 0.4%CVE-2025-49593MEDIUMPortainer HTTP Headers May Leak to Malicious Container RegistriesEPSS 0.3%CVE-2026-44849CRITICALPortainer: Endpoint security bypass via Swarm service create/updateEPSS 0.3%CVE-2026-44882HIGHPortainer: Kubernetes middleware continues after token validation failure, bypassing endpoint authorizationEPSS 0.3%CVE-2026-44848CRITICALPortainer: Missing authorization on Docker plugin endpoints allows host RCEEPSS 0.3%CVE-2026-44883HIGHPortainer: JWT accepted in URL query leaks tokens to logs and referersEPSS 0.3%CVE-2026-55761HIGHPortainer: Unauthenticated Restore Endpoint Allows Admin Takeover on Uninitialised Portainer InstancesEPSS 0.3%CVE-2026-44884MEDIUMPortainer: Missing authorization on custom template file endpoint exposes template contentEPSS 0.3%CVE-2026-44850HIGHPortainer: Bind-mount restriction bypass via HostConfig.MountsEPSS 0.2%