https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T23:39:53.107117+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-333692 EUVD-2026-333692 2026-10-05T23:39:53.112309+00:00 EUVD-2026-333692 https://cve.radiocsirt.org/vuln/fkie_cve-2026-34153 fkie_cve-2026-34153 2026-10-05T23:39:53.112344+00:00

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, LocalFileVolume::saveStorageOnServer builds shell commands using unescaped fs_path and parent_dir values before validation, and submitFileStorage does not validate the user-controlled file-mount path before creating a volume, allowing an authenticated user who can add file storage to execute commands when the storage is saved. This issue is fixed in version 4.0.0-beta.471.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2192 WID-SEC-W-2026-2192 — Coolify: Mehrere Schwachstellen 2026-10-05T23:39:53.112377+00:00

Ein Angreifer kann mehrere Schwachstellen in Coolify ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um Informationen offenzulegen, um falsche Informationen darzustellen, um Dateien zu manipulieren, um einen Denial of Service Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.