MEDIUM
dqzboy
CVE published 2026-10-25
CVE-2026-116070
CVE-2026-116070 is a missing authentication vulnerability in Docker-Proxy through version 5.1.9, specifically in the hubcmdui routes/config.js file. This allows unauthenticated attackers to read and overwrite configuration via the /api/config endpoint. The vulnerability has a CVSS score of 6.9 and a severity of MEDIUM. Defenders should assess their exposure and potential impact, and take necessary actions [truncated]