coollabsio Coolify

• CVE-2026-121587 Medium 5.3 Coolify before 4.1.1 Application Name Enumeration via Manual Webhook Endpoints 0.3%
• CVE-2026-100746 High 7.3 coollabsio Coolify GitHub App Setup redirect missing authentication 0.5%
• CVE-2026-100744 High 7.3 coollabsio Coolify Route-Level Middleware CanUpdateResource.php authorization 0.5%
• CVE-2026-86117 High 8.1 Coolify through 4.3.17 OAuth Account Takeover via Unverified Email Matching 0.7%
• CVE-2026-84694 High 8.8 Coolify before 4.2.0 Remote Code Execution via Environment Variable Key 0.8%
• CVE-2026-15507 Medium 6.3 coollabsio Coolify Policy Policies authorization 0.3%
• CVE-2026-59734 High 8.8 Coolify: OS Command Injection in Health Check Configuration Allows Remote Code Execution 0.8%
• CVE-2026-42201 Low 3.3 Coolify: OS Command Injection via Database Credential Fields in Docker Compose Service Commands 0.2%
• CVE-2026-34158 High 8.8 Coolify: Command injection via single-quote breakout in Docker Compose custom commands 0.4%
• CVE-2026-34170 Medium 4.3 Coolify: Server-Side Request Forgery via attacker-controlled GitHub App API URL 0.2%
• CVE-2026-34037 Critical 9.9 Cross-Tenant Resource Cloning via Broken Object-Level Authorization in cloneTo() 0.4%
• CVE-2026-34048 Critical 9.9 Coolify: Missing authorization on terminal websocket bootstrap routes allows low-privileged members to execute commands on team servers 0.8%
• CVE-2026-34057 High 8.8 Coolify: Authenticated Remote Code Execution via Command Injection in Database Import Container Name 0.4%
• CVE-2026-42143 High 8.8 Coolify: OS Command Injection via Persistent Volume Names - Root RCE on Managed Servers 0.5%
• CVE-2026-42147 Medium 4.9 Coolify: SSRF via S3 Storage Endpoint in testConnection() 0.3%
• CVE-2026-34044 High 7.7 Coolify: Cross-team IDOR in logs component (resource lookup not team-scoped) 0.4%
• CVE-2026-34152 High 8.8 Coolify: Command Injection via Newline in Pre/Post Deployment Commands (Heredoc Transport) 0.7%
• CVE-2026-34149 Low 3.3 Coolify: Authenticated Host-Level RCE via Unescaped Database Credentials in Backup Jobs 0.3%
• CVE-2026-34171 High 8.0 Coolify: Account takeover via CSRF-able GET endpoint that resets password to attacker-known value 0.2%
• CVE-2026-34034 High 8.8 Coolify: Host RCE via Sentinel token injection 0.8%
• CVE-2026-34168 High 8.8 Coolify: Command injection via unsanitized persistent storage name in docker volume commands 0.5%
• CVE-2026-42145 Low 3.1 Coolify: File Upload Without Type or Size Validation in Database Backup Restore 0.4%
• CVE-2026-34198 Medium 5.3 Coolify: Password reset link poisoning via X-Forwarded-Host header spoofing 0.2%
• CVE-2026-34058 High 8.8 Coolify: OS Command Injection via Unmanaged Container Operations - Remote Code Execution 0.4%
• CVE-2026-34035 High 8.8 Coolify: Host RCE via Log Drain secret/env command injection 0.4%
• CVE-2026-34047 Critical 9.9 Coolify: WebSocket Endpoint Access Control Flaw Leading to Remote Code Execution 0.6%
• CVE-2026-42172 Low 3.1 Coolify: Sanctum API Tokens Have No Expiration — Leaked Tokens Grant Permanent Access 0.2%
• CVE-2026-42200 High 8.8 Coolify: PostgreSQL Init Script Path Traversal Leads to Arbitrary File Write and Root RCE 0.7%
• CVE-2026-42153 High 8.8 Coolify: PostgreSQL Healthcheck Command Injection Allows Root Code Execution in Container 0.5%
• CVE-2026-34167 Medium 5.0 Coolify: Cross-tenant activity log disclosure via unlocked Livewire property in ActivityMonitor 0.3%
• CVE-2026-34049 Low 3.3 Coolify: Command Injection via unsanitized MongoDB collection names in database backup 0.2%
• CVE-2026-34599 High 8.8 Coolify: Authenticated Remote Code Execution in GetLogs Livewire Component 2.8%
• CVE-2026-42204 High 8.8 Coolify: Authenticated RCE via SHELL_SAFE_COMMAND_PATTERN regression → host root 0.5%
• CVE-2026-42148 Low 3.8 Coolify: Command Injection via Unescaped Version String in Docker Build 0.2%
• CVE-2026-34153 High 8.8 Coolify LocalFileVolume fs_path command injection enables RCE 0.8%
• CVE-2026-41899 Medium 6.5 Coolify unauthenticated feedback endpoint allows Discord webhook abuse 0.4%
• CVE-2026-34050 Medium 6.5 Coolify Settings/Updates Livewire component missing instance administrator authorization 0.4%
• CVE-2026-32718 Medium 6.5 Coolify read-scoped API tokens can perform state-changing validation operations 0.3%
• CVE-2026-34038 Critical 9.9 Coolify authenticated remote command injection leading to RCE and secret exfiltration 2.5%
• CVE-2026-27957 High 8.8 Coolify: Authenticated RCE via command injection in CA certificate management feature 0.8%
• CVE-2026-27956 Medium 4.3 Coolify: Cross-team application domain enumeration via domains_by_server endpoint 0.3%
• CVE-2026-27955 Medium 6.6 Coolify: Command Injection via Single-Quote Breakout in `executeInDocker()` 0.3%
• CVE-2026-27883 Medium 5.0 Coolify: IDOR in Deployment API - Cross-Team Deployment Information Disclosure 0.3%
• CVE-2026-27881 Medium 5.0 Coolify: Cross-team deployment information disclosure via GET /api/v1/deployments/{uuid} (IDOR) 0.3%
• CVE-2026-27882 Medium 4.8 Coolify: Timing Attack in GitLab Webhook Token Validation 0.2%
• CVE-2026-34592 High 7.7 Coolify: Cross-Team IDOR via Unscoped Server and Project Lookups Exposes SSH Keys and Infrastructure 0.3%
• CVE-2026-34594 High 8.8 Coolify: Authenticated Remote Code Execution via Command Injection in Destination Network Management 1.4%
• CVE-2026-34597 High 8.8 Coolify: Authenticated Host RCE 0.7%
• CVE-2026-41896 High 7.5 Coolify: Unauthenticated Deployment Trigger via Webhook HMAC Bypass with Null Secret 0.3%
• CVE-2026-57498 Critical 9.6 Coolify Cross-Team IDOR: Livewire Components Accept Unscoped server_id and destination_uuid — Deploy to Other Teams' Servers 0.3%