https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T18:48:30.588873+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-24839 CVE-2026-24839 — Dokploy has a clickjacking vulnerability - Missing X-Frame-Options and CSP frame-ancestors headers 2026-10-08T18:48:30.604341+00:00

Affected: dokploy

Dokploy is a free, self-hostable Platform as a Service (PaaS). In versions prior to 0.26.6, the Dokploy web interface is vulnerable to Clickjacking attacks due to missing frame-busting headers. This allows attackers to embed Dokploy pages in malicious iframes and trick authenticated users into performing unintended actions. Version 0.26.6 patches the issue.