CVE-2026-24840 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Dokploy is a free, self-hostable Platform as a Service (PaaS). In versions prior to 0.26.6, a hardcoded credential in the provided installation script (located…
High CVSS: 8.0

CVE-2026-24840

Dokploy is a free, self-hostable Platform as a Service (PaaS). In versions prior to 0.26.6, a hardcoded credential in the provided installation script (located at https://dokploy.com/install.sh, line 154) uses a hardcoded password when creating the database container. This means that nearly all Dokploy installations use the same database credentials and could be compromised. Version 0.26.6 contains a patch for the issue.
Vendor
Dokploy
Product
Dokploy
CWE
CWE-798
Yayın Tarihi
2026-01-28 01:16:14
Güncelleme
2026-02-04 17:55:14
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-798 Dokploy HIGH Dokploy 2026

Referanslar

https://github.com/Dokploy/dokploy/commit/b902c160a256ad345ac687c87eb092f1fab2c64d https://github.com/Dokploy/dokploy/security/advisories/GHSA-jr65-3j3w-gjmc