Vulnerability feed
CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run
| Expand | Severity |
Score |
Advisory |
Title |
Source |
Flags |
Published |
|---|---|---|---|---|---|---|---|
| Medium | 5.3 | CVE-2026-116102 |
A vulnerability was determined in QuantGeekDev docker-mcp 0.1.0/0.2.0
QuantGeekDevQuantGeekDev docker-mcp
|
NVD | |||
|
CVE-2026-116102A vulnerability was determined in QuantGeekDev docker-mcp 0.1.0/0.2.0
Executive summaryA command injection flaw has been reported in the docker-mcp project by QuantGeekDev, affecting versions 0.1.0 and 0.2.0. The advisory says the flaw can be triggered remotely, and it does not state a severity score or a vendor recommendation. Technical summaryThe flaw is an OS command injection in the _build_windows_command function of docker_executor.py, triggered by manipulating the project_name argument. The advisory states the attack can be started remotely. Affected versions are listed as 0.1.0/0.2.0. Fixed versions are not stated. Workarounds are not stated. Exploitation in the wild is not stated. Detection guidance is not stated, and no CVSS score is given. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Impact if exploitedConfidentialityLow IntegrityLow AvailabilityLow
How it is exploited
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||