[ Vendor · 3 CVEs ]
getarcaneapp
CVEs affecting getarcaneapp published in the last 30 days, plus any getarcaneapp CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-96626 | 16 Oct 2026 | CVSS 8.5 | getarcaneapp arcaneArcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.5.0, UpdateRegistry and TestRegistry in… | |
| CVE-2026-96627 | 16 Oct 2026 | CVSS 8.8 | Arcane: Delegated users:update permission allows admin account takeover via password reset (no privilege-hierarchy check)Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.6.0, UpdateUser in backend/api/handlers/users.go… | Fix |
| CVE-2026-96628 | 16 Oct 2026 | CVSS 4.3 | Arcane: Environment access token bypasses the admin-required authorization gate on `/api/debug/pprof`Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.11.0, AuthMiddleware.managerAuth accepts… | Fix |