PatchSiren

dqzboy CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM dqzboy CVE published 2026-10-25

CVE-2026-116070

CVE-2026-116070 is a missing authentication vulnerability in Docker-Proxy through version 5.1.9, specifically in the hubcmdui routes/config.js file. This allows unauthenticated attackers to read and overwrite configuration via the /api/config endpoint. The vulnerability has a CVSS score of 6.9 and a severity of MEDIUM. Defenders should assess their exposure and potential impact, and take necessary actions [truncated]