amir20

Products

ProductCVEsExploitedLatest
dozzle7–Sep 28, 2026

Exploited and recent CVEs

  • CVE-2026-102332 Medium 6.1 Dozzle before 11.1.2 Path Traversal via Log ZIP Download 0.3%
  • CVE-2026-62286 Medium 4.3 Dozzle label filters do not restrict container event and statistics streams 0.4%
  • CVE-2026-73087 Low 2.3 Dozzle: SSRF guard bypass via IPv6 transition addresses (6to4/NAT64/Teredo) in webhook notification dispatcher 0.5%
  • CVE-2026-45298 High 8.6 Dozzle: Pre-auth SSRF with response-body reflection via POST /api/notifications/test-webhook (default no-auth deploy) 1.5%
  • CVE-2026-44985 High 8.7 Dozzle: Cross-Site WebSocket Hijacking (CSWSH) on exec/attach endpoints bypasses authentication 0.2%
  • CVE-2026-24740 High 8.7 Dozzle Agent Label-Based Access Control Bypass Allows Unauthorized Container Shell Access 0.4%
  • CVE-2024-47182 Medium 4.8 Dozzle uses unsafe hash for passwords 0.2%