Vulnerabilidades de Dqzboy
CVEs publicadas que afetam produtos de Dqzboy: 1 registro(s), com severidade, exploração e correções.
CVE-2026-116070
Média · 6.5
Exploit público CWE-306 25/10/2026
Docker-Proxy through 5.1.9 Missing Authentication via hubcmdui /api/config
Docker-Proxy through 5.1.9 contains a missing authentication vulnerability in the hubcmdui routes/config.js that allows unauthenticated attackers to read and overwrite configuration via /api/config. Attackers can retrieve the WeChat webhook URL and Telegram bot token, and overwrite menuItems links, proxyDomain, and the monitoring webhook destination receiving alerts.