CVE-2026-110255Proof of concept (PoC) published · CISA
Dockhand before 1.0.43 SSRF via /api/templates/compose Endpoint
CVSS score
8.4
EPSS probability
%0.3
Risk score
0.0
Published
2 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
10.0
CVE-2026-110130
Dockhand before 1.0.45 Authentication Bypass via Static-Asset Check
F
Patch status unknownEPSS %1
9.2
CVE-2026-53988
Dockhand < 1.0.40 Unauthenticated Webhook Trigger via Git Webhook Endpoints
F
Patch verifiedEPSS %0
9.2
CVE-2026-110112
Dockhand before 1.0.50 OIDC Privilege Escalation via Missing Token Claim Validation
F
Patch status unknownEPSS %0
6.3
CVE-2026-110256
Dockhand before 1.0.19 Username Enumeration via LDAP Injection in tryLdapAuth
F
Patch status unknownEPSS %0
5.3
CVE-2026-53989
Dockhand < 1.0.36 Open Redirect via OIDC Initiation Endpoint
F
Patch verifiedEPSS %0
5.3
CVE-2026-110254
Dockhand before 1.0.45 SSRF via IPv6 Transition Address Bypass in ipCategory
F
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-110255"