FFinsys

Products

Exploited and recent CVEs

• CVE-2026-121449 Medium 6.5 Dockhand 1.0.47 before 1.0.54 Secret Disclosure via Git Stack Webhook 0.4%
• CVE-2026-121448 High 8.3 Dockhand before 1.0.54 Path Traversal via Stack Environment Routes 0.5%
• CVE-2026-113354 Medium 6.5 Dockhand before 1.0.46 Arbitrary File Read via /api/system/files/content 0.4%
• CVE-2026-57169 Critical 9.6 Dockhand: Unauthenticated container exec via WebSocket upgrade 0.3%
• CVE-2026-110256 Low 3.7 Dockhand before 1.0.19 Username Enumeration via LDAP Injection in tryLdapAuth 0.4%
• CVE-2026-110255 High 8.5 Dockhand before 1.0.43 SSRF via /api/templates/compose Endpoint 0.3%
• CVE-2026-110254 Medium 4.3 Dockhand before 1.0.45 SSRF via IPv6 Transition Address Bypass in ipCategory 0.3%
• CVE-2026-110130 Critical 10.0 Dockhand before 1.0.45 Authentication Bypass via Static-Asset Check 0.7%
• CVE-2026-110112 High 8.1 Dockhand before 1.0.50 OIDC Privilege Escalation via Missing Token Claim Validation 0.4%
• CVE-2026-53988 Critical 10.0 Dockhand < 1.0.40 Unauthenticated Webhook Trigger via Git Webhook Endpoints 0.5%
• CVE-2026-53989 Medium 4.7 Dockhand < 1.0.36 Open Redirect via OIDC Initiation Endpoint 0.3%