portainer vulnerabilities

CVEs per yearBy the year they were published

1. 20251
2. 202611

Newest CVEs

• CVE-2026-72533

  Portainer Portainer CE - Authentication Bypass

  Portainer · Portainer CE

  High8.8
• CVE-2026-55761

  Portainer: Unauthenticated Restore Endpoint Allows Admin Takeover on Uninitialised Portainer Instances

  portainer · portainer

  High7.1
• CVE-2026-44881

  Portainer: Arbitrary File Read via Git Symlink Injection in Stack Auto-Update

  portainer · portainer

  High8.5
• CVE-2026-44848

  Portainer: Missing authorization on Docker plugin endpoints allows host RCE

  portainer · portainer

  Critical9.4
• CVE-2026-44849

  Portainer: Endpoint security bypass via Swarm service create/update

  portainer · portainer

  Critical9.4
• CVE-2026-44850

  Portainer: Bind-mount restriction bypass via HostConfig.Mounts

  portainer · portainer

  High8.5
• CVE-2026-44882

  Portainer: Kubernetes middleware continues after token validation failure, bypassing endpoint authorization

  portainer · portainer

  High8.1
• CVE-2026-44883

  Portainer: JWT accepted in URL query leaks tokens to logs and referers

  portainer · portainer

  High7.7
• CVE-2026-44884

  Portainer: Missing authorization on custom template file endpoint exposes template content

  portainer · portainer

  Medium6.0
• CVE-2026-44885

  Portainer: Path traversal in backup archive extraction allows arbitrary file write

  portainer · portainer

  Medium5.5