TI-2026-29036 CVE-2026-40242 · GHSA-ff24-4prj-gpmj
Arcane Unauthenticated SSRF with Conditional Response Reflection in Template Fetch Endpoint
Priority HIGH 71
Arcane is an interface for managing Docker containers, images, networks, and volumes.
Getarcane
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Getarcane records in CISA KEVNo Getarcane vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records in Arcane · all components
TI-2026-30749 CVE-2026-42461 · GHSA-cxx3-hr75-4q96
Arcane Vulnerable to Unauthenticated Disclosure of Custom Compose Template Content (incl. `.env` secrets)
Priority MEDIUM 46
Arcane is an interface for managing Docker containers, images, networks, and volumes.