CVE Intelligence

Dqzboy Docker-Proxy vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Dqzboy Docker-Proxy: 1 record(s), with affected versions and fixes.

CVE-2026-116070 Medium · 6.5 Public exploit CWE-306 Oct 25, 2026
Docker-Proxy through 5.1.9 Missing Authentication via hubcmdui /api/config
Docker-Proxy through 5.1.9 contains a missing authentication vulnerability in the hubcmdui routes/config.js that allows unauthenticated attackers to read and overwrite configuration via /api/config. Attackers can retrieve the WeChat webhook URL and Telegram bot token, and overwrite menuItems links, proxyDomain, and the monitoring webhook destination receiving alerts.