CVE-2026-44848
Missing authorization in Portainer
CVSS score
8.8
EPSS probability
%0.4
Risk score
0.0
Published
4 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
PoC for CVE-2026-44848: Portainer missing authorization on Docker plugin endpoints -> host RCE (GHSA-rrmm-9v76-h3p4). Stdlib-only Python.
Makefile Go / Python
https://github.com/portainer/portainer/security/advisories/GHSA-rrmm-9v76-h3p4
Makefile Go / Python
Similar Vulnerabilities
5.3
CVE-2024-29296Vulnerability in Portainer
Patch status unknown Public Exploits:2EPSS %1
9.9
CVE-2026-44881Information exposure in Portainer
Patch status unknown Public Exploits:2EPSS %1
8.8
CVE-2026-72533Portainer Portainer CE - Authentication Bypass
Patch status unknownEPSS %1
5.5
CVE-2026-44885Path traversal in Portainer
Patch status unknown Public Exploits:1EPSS %1
8.8
CVE-2026-44849Missing authorization in Portainer
Patch status unknown Public Exploits:1EPSS %0
8.1
CVE-2026-44882Incorrect authorization in Portainer
Patch status unknown Public Exploits:1EPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-44848"