https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:36:05.239550+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-362911 EUVD-2026-362911 2026-10-03T05:36:05.310378+00:00 EUVD-2026-362911 https://cve.radiocsirt.org/vuln/fkie_cve-2026-84694 fkie_cve-2026-84694 2026-10-03T05:36:05.310415+00:00

Coolify before 4.2.0 fails to properly escape environment variable key names in Docker commands executed over SSH on managed servers. Authenticated attackers can inject shell metacharacters into environment variable keys to execute arbitrary commands on the server host outside containers.

 https://cve.radiocsirt.org/vuln/ghsa-xf4v-vq77-2rgv GHSA-xf4v-vq77-2rgv 2026-10-03T05:36:05.310449+00:00

Coolify before 4.2.0 fails to properly escape environment variable key names in Docker commands executed over SSH on managed servers. Authenticated attackers can inject shell metacharacters into environment variable keys to execute arbitrary commands on the server host outside containers.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3150 WID-SEC-W-2026-3150 — Coolify: Schwachstelle ermöglicht Codeausführung 2026-10-03T05:36:05.310466+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Coolify ausnutzen, um beliebigen Programmcode auszuführen.