TI-2026-19945 CVE-2026-24740 · GHSA-m855-r557-5rc5
Dozzle Agent Label-Based Access Control Bypass Allows Unauthorized Container Shell Access
Priority HIGH 79
Dozzle is a realtime log viewer for docker containers.
amir20
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
amir20 records in CISA KEVNo amir20 vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records
TI-2026-33098 CVE-2026-45298 · GHSA-3v9w-6365-9w54
Dozzle: Pre-auth SSRF with response-body reflection via POST /api/notifications/test-webhook (default no-auth deploy)
Priority HIGH 76
Dozzle is a realtime log viewer for docker containers.
TI-2026-32844 CVE-2026-44985 · GHSA-j643-x8pv-8m67
Dozzle: Cross-Site WebSocket Hijacking (CSWSH) on exec/attach endpoints bypasses authentication
Priority HIGH 73
Dozzle is a realtime log viewer for docker containers.
TI-2026-44477 CVE-2026-62286 · GHSA-xcw9-qmmf-vqxj
Dozzle label filters do not restrict container event and statistics streams
Priority MEDIUM 53
Dozzle is a realtime log viewer for docker containers.
TI-2026-51294 CVE-2026-73087 · GHSA-p2w3-6x73-2f6x
Dozzle: SSRF guard bypass via IPv6 transition addresses (6to4/NAT64/Teredo) in webhook notification dispatcher
Priority MEDIUM 45
Dozzle is a realtime log viewer for docker containers.
TI-2024-31549 CVE-2024-47182 · GHSA-w7qr-q9fh-fj35
Dozzle uses unsafe hash for passwords
Priority LOW 32
Dozzle is a realtime log viewer for docker containers.
TI-2026-65354 CVE-2026-102332 · GHSA-746p-gqhc-m84c
Dozzle before 11.1.2 Path Traversal via Log ZIP Download
Priority LOW 21
Dozzle versions before 11.1.2 fail to sanitize container display names when building ZIP archive entry names in the log download endpoint.