Saturday, May 30, 2026 Archive

Archived Security Snapshot

Critical vulnerabilities, curated daily for security professionals

đŸŽ¯ SSCV Profile

See how vulnerabilities affect your specific environment

CRS uses the System Security Context Vector (SSCV) Framework v1.0 to adjust CVSS scores based on your system's exposure level, network position, and business criticality. Learn more about SSCV Framework

Risk scores will be adjusted based on your selected environment

Archived Security Brief

Self-hosted deployment and container management platforms dominated Saturday's disclosures, led by a cluster of Dokploy PaaS vulnerabilities and exposed Docker management interfaces. The day brought 18 critical CVEs (CVSS 9.0+), down 5% from the prior day's 19, alongside 63 high-priority CVEs, up 9% from 58. CVE-2026-45631 (CVSS 10) and several companion flaws in Dokploy PaaS headline the critical set, joined by CVE-2026-45625 (CVSS 9.9) in the Arcane Docker container management interface and CVE-2026-10042 (CVSS 9.8) in the manga-image-translator API server. The concentration in PaaS control planes, container orchestration, and exposed management APIs points to remote code execution and authentication bypass risk on internet-facing developer and operations infrastructure. No patches were available at disclosure for the critical issues, so affected operators should prioritize access restriction and network isolation while fixes are pending.

  • Dokploy PaaS accounts for several critical CVEs including CVE-2026-45631 at the maximum CVSS 10, affecting self-hosted deployment control planes
  • Critical CVEs totaled 18, a 5% decrease from the prior day's 19
  • High-priority CVEs rose to 63, a 9% increase from 58 the prior day
  • Container and platform management interfaces are central, with CVE-2026-45625 (CVSS 9.9, Arcane Docker) and CVE-2026-10042 (CVSS 9.8, manga-image-translator API) exposing RCE and auth-bypass paths
  • Patch availability stands at 0% for the disclosed critical issues, leaving exposed Dokploy, Docker, and Mautic (CVE-2026-9558, CVSS 9.9) deployments reliant on access controls
  • Five CVEs carry confirmed active exploitation, including Palo Alto Networks PAN-OS (CVE-2026-0257) and the LiteSpeed cPanel plugin (CVE-2026-48172)

Immediate action: Prioritize self-hosted Dokploy PaaS, Arcane Docker, and other exposed container management interfaces, restricting network access and enforcing authentication on management endpoints while vendor patches remain unavailable. Separately, expedite remediation of the actively exploited Palo Alto Networks PAN-OS and LiteSpeed cPanel plugin flaws where vendor fixes exist. With 0% patch availability for the critical set, treat isolation and monitoring as the primary near-term controls.

💡 Tip: Swipe CVE cards left to ⭐ star, right to ❌ remove

Section Navigation