Finsys vulnerabilities

Newest CVEs

• CVE-2026-121449

  Dockhand 1.0.47 before 1.0.54 Secret Disclosure via Git Stack Webhook

  Finsys · dockhand

  High7.1
• CVE-2026-121448

  Dockhand before 1.0.54 Path Traversal via Stack Environment Routes

  Finsys · dockhand

  High8.7
• CVE-2026-113354

  Dockhand before 1.0.46 Arbitrary File Read via /api/system/files/content

  Finsys · dockhand

  High7.1
• CVE-2026-57169

  Dockhand: Unauthenticated container exec via WebSocket upgrade

  Finsys · dockhand

  Critical9.6
• CVE-2026-110256

  Dockhand before 1.0.19 Username Enumeration via LDAP Injection in tryLdapAuth

  Finsys · dockhand

  Medium6.3
• CVE-2026-110255

  Dockhand before 1.0.43 SSRF via /api/templates/compose Endpoint

  Finsys · dockhand

  High8.4
• CVE-2026-110254

  Dockhand before 1.0.45 SSRF via IPv6 Transition Address Bypass in ipCategory

  Finsys · dockhand

  Medium5.3
• CVE-2026-110130

  Dockhand before 1.0.45 Authentication Bypass via Static-Asset Check

  Finsys · dockhand

  Critical10.0
• CVE-2026-110112

  Dockhand before 1.0.50 OIDC Privilege Escalation via Missing Token Claim Validation

  Finsys · dockhand

  Critical9.2
• CVE-2026-53988

  Dockhand < 1.0.40 Unauthenticated Webhook Trigger via Git Webhook Endpoints

  Finsys · dockhand

  Critical9.2