Portainer

Products

Exploited and recent CVEs

• CVE-2026-72533 High 8.8 Portainer Portainer CE - Authentication Bypass 0.6%
• CVE-2026-55761 High 7.1 Portainer: Unauthenticated Restore Endpoint Allows Admin Takeover on Uninitialised Portainer Instances 0.5%
• CVE-2026-44881 High 8.5 Portainer: Arbitrary File Read via Git Symlink Injection in Stack Auto-Update 0.5%
• CVE-2026-44848 Critical 9.4 Portainer: Missing authorization on Docker plugin endpoints allows host RCE 0.4%
• CVE-2026-44849 Critical 9.4 Portainer: Endpoint security bypass via Swarm service create/update 0.4%
• CVE-2026-44850 High 8.5 Portainer: Bind-mount restriction bypass via HostConfig.Mounts 0.2%
• CVE-2026-44882 High 8.1 Portainer: Kubernetes middleware continues after token validation failure, bypassing endpoint authorization 0.3%
• CVE-2026-44883 High 7.7 Portainer: JWT accepted in URL query leaks tokens to logs and referers 0.3%
• CVE-2026-44884 Medium 6.0 Portainer: Missing authorization on custom template file endpoint exposes template content 0.3%
• CVE-2026-44885 Medium 5.5 Portainer: Path traversal in backup archive extraction allows arbitrary file write 0.6%
• CVE-2026-33590 High 8.5 Insecure default permissions in Portainer CE 0.5%
• CVE-2025-49593 Medium 6.8 Portainer HTTP Headers May Leak to Malicious Container Registries 0.4%