Ddokku

Products

Exploited and recent CVEs

• CVE-2026-86002 Critical 9.0 Dokku: Host Command Execution via eval of Unsanitized Docker Options in DOCKER_ARGS 0.6%
• CVE-2026-54636 Critical 9.0 Dokku: OS Command Injection via app.json managed Cron 0.5%
• CVE-2026-45405 Critical 9.0 Dokku: Arbitrary File Write via Tar Symlink Traversal in git:from-archive and certs:add 0.5%
• CVE-2026-45406 Critical 9.0 Dokku: Host RCE via Maliciously Named OpenResty Include Files Injected Through eval 0.5%
• CVE-2026-45407 Medium 5.0 Dokku: Git Credentials in .netrc Stored World-Readable Due to Premature touch 0.1%
• CVE-2026-45408 Critical 9.0 Dokku: OS Command Injection via App Name in Git Pre-Receive Hook 0.4%