Boletines de Vulnerabilidades |
CVE-2026-116070 |
|
| Software afectado | DOCKER |
| Docker-Proxy through 5.1.9 contains a missing authentication vulnerability in the hubcmdui routes/config.js that allows unauthenticated attackers to read and overwrite configuration via /api/config. Attackers can retrieve the WeChat webhook URL and Telegram bot token, and overwrite menuItems links, proxyDomain, and the monitoring webhook destination receiving alerts. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-116070 | |