FI
Vendor
Finsys
9
CVEs
0
On KEV
9
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-113354 | DO dockhand Finsys | 6.5 | Oct 20 | Dockhand before 1.0.46 Arbitrary File Read via /api/system/files/content |
| CVE-2026-57169 | DO dockhand Finsys | 9.6 | Oct 16 | Dockhand: Unauthenticated container exec via WebSocket upgrade |
| CVE-2026-110256 | DO dockhand Finsys | 3.7 | Oct 13 | Dockhand before 1.0.19 Username Enumeration via LDAP Injection in tryLdapAuth |
| CVE-2026-110255 | DO dockhand Finsys | 8.5 | Oct 13 | Dockhand before 1.0.43 SSRF via /api/templates/compose Endpoint |
| CVE-2026-110254 | DO dockhand Finsys | 4.3 | Oct 13 | Dockhand before 1.0.45 SSRF via IPv6 Transition Address Bypass in ipCategory |
| CVE-2026-110130 | DO dockhand Finsys | 10.0 | Oct 13 | Dockhand before 1.0.45 Authentication Bypass via Static-Asset Check |
| CVE-2026-110112 | DO dockhand Finsys | 8.1 | Oct 13 | Dockhand before 1.0.50 OIDC Privilege Escalation via Missing Token Claim Validation |
| CVE-2026-53988 | DO dockhand Finsys | 10.0 | Sep 29 | Dockhand < 1.0.40 Unauthenticated Webhook Trigger via Git Webhook Endpoints |
| CVE-2026-53989 | DO dockhand Finsys | 4.7 | Sep 29 | Dockhand < 1.0.36 Open Redirect via OIDC Initiation Endpoint |