What’s Vulnerable › Products

Finsys dockhand vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Check whether your Finsys dockhand version is affected

Latest Finsys dockhand vulnerabilities

• CVE-2026-113354 — Dockhand before 1.0.46 Arbitrary File Read via /api/system/files/content (CVSS 6.5)
• CVE-2026-57169 — Dockhand: Unauthenticated container exec via WebSocket upgrade (CVSS 9.6)
• CVE-2026-110256 — Dockhand before 1.0.19 Username Enumeration via LDAP Injection in tryLdapAuth (CVSS 3.7)
• CVE-2026-110255 — Dockhand before 1.0.43 SSRF via /api/templates/compose Endpoint (CVSS 8.5)
• CVE-2026-110254 — Dockhand before 1.0.45 SSRF via IPv6 Transition Address Bypass in ipCategory (CVSS 4.3)
• CVE-2026-110130 — Dockhand before 1.0.45 Authentication Bypass via Static-Asset Check (CVSS 10.0)
• CVE-2026-110112 — Dockhand before 1.0.50 OIDC Privilege Escalation via Missing Token Claim Validation (CVSS 8.1)
• CVE-2026-53989 — Dockhand < 1.0.36 Open Redirect via OIDC Initiation Endpoint (CVSS 4.7)
• CVE-2026-53988 — Dockhand < 1.0.40 Unauthenticated Webhook Trigger via Git Webhook Endpoints (CVSS 10.0)