Approved changes feed: RSS · Atom
cpe:2.3:a:notifiarr:dockwatch:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Notifiarr (8f77ca5f-5f1e-51c4-bddd-b74b5eae75a6) |
|---|---|
| Product | Dockwatch (713b03e0-758c-52b5-8fb4-da2f299c013c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-58455 |
vulnerable | 2026-07-29 01:03:16.823300 |
Dockwatch 0.6.567 Unauthenticated OS Command Injection via ajax/compose.php
CRITICAL (9.8)
Dockwatch through 0.6.567 contains an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary shell commands by exploiting a missing exit() after an authentication redirect in loader.php combined with unsanitized input passed to shell_exec() in ajax/compose.php. Attackers can seed the required session flag through the incomplete auth check, then inject arbitrary commands via the composePath POST parameter in the composePull action to achieve full host compromise, facilitated by the standard deployment mounting of the Docker socket.
Published: 2026-07-02T15:12:10.383Z
Updated: 2026-11-08T14:07:04.354Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.