Mmastodon TechnologyCybersecurity first seen 1 d ago, last 1 d ago, peak #5

Critical vulnerability CVE-2026-62308 disclosed in Tugtainer

Original: 🚨 CVE-2026-62308 — CVSS 9.1 CRITICAL Tugtainer is a self-hosted app for automating updates of Docker containers. Prior t

A critical vulnerability, CVE-2026-62308 with a CVSS score of 9.1, has been disclosed in Tugtainer, a self-hosted application for automating Docker container updates. Versions prior to 1.30.6 allow an authenticated user to make the backend server send outbound HTTP requests to arbitrary user-supplied URLs, a server-side request forgery flaw. Admins running affected versions are urged to update to 1.30.6 or later.

Why now: System administrators who self-host Docker environments need to patch urgently against a critical severity flaw.

TugtainerDockerCVE-2026-62308

Open on mastodon →

Evidence

• 🚨 CVE-2026-62308 — CVSS 9.1 CRITICAL Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.30.6, Tugtainer allows an authenticated user to make the backend server send outbound HTTP requests to arbitrary user-supplied URLs through the… · stemshop

API: https://socialmediatrends-api.osmike.com/v1/trends/513647