https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-25T19:36:57.962040+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-113354 CVE-2026-113354 — Dockhand before 1.0.46 Arbitrary File Read via /api/system/files/content 2026-10-25T19:36:57.963794+00:00

Affected: Finsys dockhand

Dockhand before 1.0.46 contains an arbitrary file read vulnerability that allows non-admin users with stacks:edit permission to read files through the path parameter of /api/system/files/content. Attackers can supply absolute paths to read /etc/shadow, /etc/passwd, git .git/config credentials, and SSH keys from the Dockhand container.