Product by Finsys
Dockhand
11 known vulnerabilities in Dockhand (Finsys), 0 of them actively exploited (CISA KEV).
Key figures
11
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-110130 | Dockhand before 1.0.45 Authentication Bypass via Static-Asset Check | 10.0 | |
| Critical | CVE-2026-53988 | Dockhand < 1.0.40 Unauthenticated Webhook Trigger via Git Webhook Endpoints | 10.0 | |
| High | CVE-2026-121448 | Dockhand before 1.0.54 Path Traversal via Stack Environment Routes | 8.3 | |
| Critical | CVE-2026-110112 | Dockhand before 1.0.50 OIDC Privilege Escalation via Missing Token Claim Validation | 8.1 | |
| Critical | CVE-2026-57169 | Dockhand: Unauthenticated container exec via WebSocket upgrade | 9.6 | |
| High | CVE-2026-121449 | Dockhand 1.0.47 before 1.0.54 Secret Disclosure via Git Stack Webhook | 6.5 | |
| High | CVE-2026-110255 | Dockhand before 1.0.43 SSRF via /api/templates/compose Endpoint | 8.5 | |
| High | CVE-2026-113354 | Dockhand before 1.0.46 Arbitrary File Read via /api/system/files/content | 6.5 | |
| Medium | CVE-2026-110256 | Dockhand before 1.0.19 Username Enumeration via LDAP Injection in tryLdapAuth | 3.7 | |
| Medium | CVE-2026-110254 | Dockhand before 1.0.45 SSRF via IPv6 Transition Address Bypass in ipCategory | 4.3 | |
| Medium | CVE-2026-53989 | Dockhand < 1.0.36 Open Redirect via OIDC Initiation Endpoint | 4.7 |