Vulnerabilities

TI-2026-20040 CVE-2026-24841

OS command injection in dokploy

HIGH 76

Dokploy is a free, self-hostable Platform as a Service (PaaS).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.02792 Published 2026-01-28 Fixed in 0.26.6 CWE-78

TI-2026-20039 CVE-2026-24840

HIGH 73

Dokploy is a free, self-hostable Platform as a Service (PaaS).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00379 Published 2026-01-28 Fixed in 0.26.6 CWE-798

TI-2026-20038 CVE-2026-24839

MEDIUM 60

Dokploy is a free, self-hostable Platform as a Service (PaaS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00242 Published 2026-01-28 Fixed in 0.26.6 CWE-1021

TI-2025-33717 CVE-2025-53825

HIGH 82

Dokploy is a free, self-hostable Platform as a Service (PaaS).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00613 Published 2025-07-14 Fixed in 0.24.3 CWE-862

TI-2025-33337 CVE-2025-53375

LOW 29

Dokploy is a self-hostable Platform as a Service (PaaS) that simplifies the deployment and management of applications and databases.

CVSS 4.0MEDIUM 4.9 Network Low privileges No interaction EPSS 0.0043 Published 2025-07-07 Fixed in 0.23.7 CWE-22

TI-2025-33338 CVE-2025-53376

LOW 38

Dokploy is a self-hostable Platform as a Service (PaaS) that simplifies the deployment and management of applications and databases.

CVSS 4.0MEDIUM 6.3 Network Low privileges No interaction EPSS 0.01083 Published 2025-07-07 Fixed in 0.23.7 CWE-78

TI-2025-33336 CVE-2025-53374

LOW 8

Dokploy is a self-hostable Platform as a Service (PaaS) that simplifies the deployment and management of applications and databases.

CVSS 4.0LOW 1.3 Network Low privileges No interaction EPSS 0.00235 Published 2025-07-07 Fixed in 0.23.7 CWE-359