CVE WATCH / VULNERABILITY DETAIL
CVE-2026-116070
MEDIUMCVSS 6.5NVD feed
Published 25 October 2026 · tracked since 25 October 2026
Description
Docker-Proxy through 5.1.9 contains a missing authentication vulnerability in the hubcmdui routes/config.js that allows unauthenticated attackers to read and overwrite configuration via /api/config. Attackers can retrieve the WeChat webhook URL and Telegram bot token, and overwrite menuItems links,
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-116072 MEDIUM 5.4
- CVE-2026-116049 HIGH 7.3
- CVE-2026-116050 HIGH 7.3
- CVE-2026-116048 HIGH 7.3
- CVE-2026-94295
- CVE-2026-114743
- CVE-2026-115183
- CVE-2026-115214
- CVE-2026-115251
- CVE-2026-116044 MEDIUM 6.3