What is the CVSS score of CVE-2026-24740?

CVE-2026-24740 has a CVSS 3.1 base score of 9.9 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L. EPSS exploitation probability: 0.0%.

Which versions of Docker are affected by CVE-2026-24740?

CVE-2026-24740 is a critical vulnerability (CVSS 9.9) in Dozzle, a Docker log viewer tool, with active public exploits available.. A patch is available.

Is there a public PoC exploit available for CVE-2026-24740?

Yes, a public proof-of-concept exploit is available for CVE-2026-24740. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-24740?

Within 24 hours: Identify all systems running Dozzle and assess their exposure to untrusted networks; isolate or restrict network access to affected instances if patching cannot be completed immediately. Within 7 days: Apply the available vendor patch to all Dozzle installations and verify successful deployment. Within 30 days: Conduct a log review to determine if the vulnerability was exploited during the exposure window and implement network segmentation to restrict Dozzle access to authorized administrative users only.

Docker CVE-2026-24740

CRITICAL

Improper Access Control (CWE-284)

2026-01-27 security-advisories@github.com

GHSA-m855-r557-5rc5

Docker Dozzle Suse

9.9

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

9.9 CRITICAL

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L

SUSE

8.7 HIGH

qualitative

Primary rating from GitHub Advisory.

CVSS VectorGitHub Advisory

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

Low

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

PoC Detected

Feb 19, 2026 - 21:30 vuln.today

Public exploit code

Patch released

Feb 19, 2026 - 21:30 nvd

Patch available

CVE Published

Jan 27, 2026 - 21:16 nvd

CRITICAL 9.9

DescriptionGitHub Advisory

Dozzle is a realtime log viewer for docker containers. Prior to version 9.0.3, a flaw in Dozzle’s agent-backed shell endpoints allows a user restricted by label filters (for example, label=env=dev) to obtain an interactive root shell in out‑of‑scope containers (for example, env=prod) on the same agent host by directly targeting their container IDs. Version 9.0.3 contains a patch for the issue.

AnalysisAI

Critical access control flaw in Dozzle Docker log viewer allows users restricted by label filters to escape their scope and obtain an interactive root shell on out-of-scope containers. PoC available, patch in v9.0.3.

Technical ContextAI

CWE-284 in Dozzle before v9.0.3. Label-based access restrictions (e.g., label=env=dev) on shell endpoints can be bypassed, granting root shell access to any container regardless of assigned scope.

RemediationAI

Update to Dozzle 9.0.3. Review container access logs for unauthorized shell sessions. Consider network segmentation between environments.

More in Docker

View all

CVE-2024-55964 CRITICAL Emergency POC

9.8 Mar 26

An issue was discovered in Appsmith before 1.52. Rated critical severity (CVSS 9.8), this vulnerability is remotely expl

CVE-2019-5736 HIGH Act Now POC

8.6 Feb 11

runc through version 1.0-rc6 (used in Docker before 18.09.2) contains a container escape vulnerability that allows attac

CVE-2023-32077 HIGH Act Now POC

7.5 Aug 24

Netmaker makes networks with WireGuard. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no a

CVE-2026-39987 CRITICAL Act Now POC

9.3 Apr 08

Unauthenticated remote code execution in Marimo ≤0.20.4 allows attackers to execute arbitrary system commands via the `/

CVE-2023-5815 HIGH Act Now POC

8.1 Nov 22

The News & Blog Designer Pack - WordPress Blog Plugin - (Blog Post Grid, Blog Post Slider, Blog Post Carousel, Blog Post

CVE-2026-66384 MEDIUM Act Now POC

5.3 Aug 12

Path traversal in JFrog Artifactory (CWE-22) enables an authenticated low-privilege user to write data outside the inten

CVE-2014-9357 CRITICAL Act Now

10.0 Dec 16

Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or (2) build

CVE-2026-52806 CRITICAL Act Now POC

9.9 Jun 23

Remote code execution in Gogs through 0.14.2 allows authenticated users (and unauthenticated attackers on default-config

CVE-2026-56274 HIGH Act Now POC

8.7 Jun 23

Remote code execution in Flowise before 3.1.2 allows any authenticated user (or API caller with chatflow view/update per

CVE-2026-34156 CRITICAL Act Now POC

9.9 Mar 30

Remote code execution in NocoBase Workflow Script Node (npm @nocobase/plugin-workflow-javascript) allows authenticated l

CVE-2019-15752 HIGH Act Now POC

7.8 Aug 28

Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-c

CVE-2025-34221 CRITICAL Act Now POC

10.0 Sep 29

Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.2.169 and Application prior to version 2

Same weakness CWE-284 – Improper Access Control

View all

CVE-2012-4681 CRITICAL POC

9.8

CVE-2011-3544 CRITICAL POC

9.8

CVE-2012-1723 CRITICAL POC

9.8

CVE-2012-5076 CRITICAL POC

9.8

CVE-2014-3120 HIGH POC

8.1

CVE-2013-2423 LOW POC

3.7

CVE-2016-3427 CRITICAL

9.8

CVE-2025-12480 CRITICAL POC

9.1

Vendor StatusVendor

SUSE

Severity: High

CVE-2026-24740 vulnerability details – vuln.today

Back

Docker CVE-2026-24740

Severity by source

CVSS VectorGitHub Advisory

Lifecycle Timeline

DescriptionGitHub Advisory

AnalysisAI

Technical ContextAI

RemediationAI

More in Docker

Same weakness CWE-284 – Improper Access Control

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code