CVE-2026-72533 | High | 8.8 | 2026-08-11 | An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged users to bypass Docker proxy authorization checks via… |
CVE-2026-55761 | Medium | 5.9 | 2026-07-08 | Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and… |
CVE-2026-44885 | Medium | 5.5 | 2026-05-28 | Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and… |
CVE-2026-44884 | Medium | 6.5 | 2026-05-28 | Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and… |
CVE-2026-44883 | High | 7.5 | 2026-05-28 | Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and… |
CVE-2026-44882 | High | 8.1 | 2026-05-28 | Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and… |
CVE-2026-44881 | Critical | 9.9 | 2026-05-28 | Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and… |
CVE-2026-44850 | High | 8.5 | 2026-05-28 | Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and… |
CVE-2026-44849 | High | 8.8 | 2026-05-28 | Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and… |
CVE-2026-44848 | High | 8.8 | 2026-05-28 | Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and… |
CVE-2026-33590 | | | 2026-05-28 | Insecure default settings of Portainer CE grant regular (non-admin) users privileges that allow host filesystem access and host-level code execution. An authen… |
CVE-2025-49593 | Medium | 6.8 | 2025-06-17 | Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and… |
CVE-2024-33662 | High | 7.5 | 2024-10-02 | Portainer before 2.20.2 improperly uses an encryption algorithm in the AesEncrypt function. |
CVE-2024-33661 | Critical | 9.1 | 2024-04-26 | Portainer before 2.20.0 allows redirects when the target is not index.yaml. |
CVE-2024-29296 | Medium | 5.3 | 2024-04-10 | A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference in response time co… |
CVE-2022-24961 | Critical | 9.8 | 2022-02-11 | In Portainer Agent before 2.11.1, an API server can continue running even if not associated with a Portainer instance in the past few days. |
CVE-2021-42650 | Medium | 6.1 | 2021-10-18 | Cross Site Scripting (XSS vulnerability exists in Portainer before 2.9.1 via the node input box in Custom Templates. |
CVE-2020-24264 | Critical | 9.8 | 2021-03-16 | Portainer 1.24.1 and earlier is affected by incorrect access control that may lead to remote arbitrary code execution. The restriction checks for bind mounts a… |
CVE-2020-24263 | High | 8.8 | 2021-03-16 | Portainer 1.24.1 and earlier is affected by an insecure permissions vulnerability that may lead to remote arbitrary code execution. A non-admin user is allowed… |
CVE-2019-16878 | Medium | 5.4 | 2019-11-07 | Portainer before 1.22.1 has XSS (issue 2 of 2). |
CVE-2019-16877 | High | 8.8 | 2019-11-07 | Portainer before 1.22.1 has Incorrect Access Control (issue 4 of 4). |
CVE-2019-16876 | High | 7.5 | 2019-11-07 | Portainer before 1.22.1 allows Directory Traversal. |
CVE-2019-16872 | Critical | 9.9 | 2019-11-07 | Portainer before 1.22.1 has Incorrect Access Control (issue 1 of 4). |
CVE-2019-16874 | Medium | 6.5 | 2019-11-07 | Portainer before 1.22.1 has Incorrect Access Control (issue 2 of 4). |
CVE-2019-16873 | Medium | 5.4 | 2019-11-07 | Portainer before 1.22.1 has XSS (issue 1 of 2). |
CVE-2018-19466 | Critical | 9.8 | 2019-03-27 | A vulnerability was found in Portainer before 1.20.0. Portainer stores LDAP credentials, corresponding to a master password, in cleartext and allows their retr… |
CVE-2018-19367 | Critical | 9.8 | 2018-11-20 | Portainer through 1.19.2 provides an API endpoint (/api/users/admin/check) to verify that the admin user is already created. This API endpoint will return 404… |
CVE-2018-16316 | Medium | 5.4 | 2018-09-01 | A stored Cross-site scripting (XSS) vulnerability in Portainer through 1.19.1 allows remote authenticated users to inject arbitrary JavaScript and/or HTML via… |
CVE-2018-12678 | Critical | 9.8 | 2018-06-22 | Portainer before 1.18.0 supports unauthenticated requests to the websocket endpoint with an unvalidated id query parameter for the /websocket/exec endpoint, wh… |