Threats tagged 'ghsa-wv46-wr7m-42rh'

1 threat

Threats tagged 'ghsa-wv46-wr7m-42rh'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.9	EPSS 0.5%	CVE-2026-100744Coolify · Missing Authorization Medium6.9EPSS 0.5%2026-09-27CVE Database V5CVE-2026-100744 CVE-2026-100744 is a medium severity vulnerability in coollabsio Coolify up to version 4.1.2. It involves missing authorization in a route-level middleware function located in app/Http/Middleware/CanUpdateResource.php. The flaw can be exploited remotely without authentication. An exploit has been published. Upgrading to version 4.2.0 addresses this issue. EPSS 0.5%Vulnerability coollabsio #ghsa-wv46-wr7m-42rh	CVE Database V5	2026-09-27

Showing 1–1 of 1 result