Priority HIGH 82
Dokploy is a free, self-hostable Platform as a Service (PaaS).
Dokploy
Records59All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical36CVSS 9.0–10.0
CVSS high12CVSS 7.0–8.9
Exploited now
Dokploy records in CISA KEVNo Dokploy vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records in Dokploy · all components
TI-2026-20040 CVE-2026-24841
OS command injection in dokploy
Priority HIGH 76
Dokploy is a free, self-hostable Platform as a Service (PaaS).
TI-2026-20039 CVE-2026-24840
Dokploy uses hardcoded credentials in installation script, which could result in database access
Priority HIGH 73
Dokploy is a free, self-hostable Platform as a Service (PaaS).
TI-2026-20038 CVE-2026-24839
Dokploy has a clickjacking vulnerability - Missing X-Frame-Options and CSP frame-ancestors headers
Priority MEDIUM 60
Dokploy is a free, self-hostable Platform as a Service (PaaS).
TI-2025-33338 CVE-2025-53376
Dokploy allows attackers to run arbitrary OS commands on the Dokploy host.
Priority LOW 38
Dokploy is a self-hostable Platform as a Service (PaaS) that simplifies the deployment and management of applications and databases.
TI-2025-33337 CVE-2025-53375
Dokploy allows attackers to read any file that the Traefik process user can access
Priority LOW 29
Dokploy is a self-hostable Platform as a Service (PaaS) that simplifies the deployment and management of applications and databases.
Priority LOW 8
Dokploy is a self-hostable Platform as a Service (PaaS) that simplifies the deployment and management of applications and databases.