Ein Angreifer kann mehrere Schwachstellen in Coolify ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um Informationen offenzulegen, um falsche Informationen darzustellen, um Dateien zu manipulieren, um einen Denial of Service Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.
[UPDATE] [hoch] Coolify: Mehrere Schwachstellen
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2026-07-10 07:23 UTC
- Importiert: 2026-07-14 06:37 UTC
- Quelle-ID:
cert_bund - uid_hash:
46ee5f744493784449ba2dd2b74d746d63992bba39428028d70dc94fca1e4e83
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
HIGH |
CRITICAL |
10 |
2025-12-23 |
||||
HIGH |
CRITICAL |
9.4 |
2025-12-23 |
||||
HIGH |
MEDIUM |
6.5 |
2026-07-06 |
||||
HIGH |
HIGH |
8.8 |
2026-07-07 |
||||
HIGH |
HIGH |
8.8 |
2026-07-07 |
||||
HIGH |
CRITICAL |
9.9 |
2026-07-07 |
||||
HIGH |
HIGH |
7.7 |
2026-07-07 |
||||
HIGH |
CRITICAL |
9.9 |
2026-07-07 |
||||
HIGH |
CRITICAL |
9.9 |
2026-07-07 |
||||
HIGH |
LOW |
3.3 |
2026-07-06 |
||||
HIGH |
MEDIUM |
6.5 |
2026-07-06 |
||||
HIGH |
HIGH |
8.8 |
2026-07-07 |
||||
HIGH |
HIGH |
8.8 |
2026-07-07 |
||||
HIGH |
LOW |
3.3 |
2026-07-07 |
||||
HIGH |
HIGH |
8.8 |
2026-07-07 |
||||
HIGH |
HIGH |
8.8 |
2026-07-06 |
||||
HIGH |
HIGH |
8.8 |
2026-07-07 |
||||
HIGH |
MEDIUM |
5 |
2026-07-06 |
||||
HIGH |
HIGH |
8.8 |
2026-07-07 |
||||
HIGH |
MEDIUM |
4.3 |
2026-07-07 |
||||
HIGH |
HIGH |
8 |
2026-07-07 |
||||
HIGH |
MEDIUM |
5.3 |
2026-07-07 |
||||
HIGH |
HIGH |
8.8 |
2026-07-06 |
||||
HIGH |
MEDIUM |
6.5 |
2026-07-06 |
||||
HIGH |
HIGH |
8.8 |
2026-07-07 |
||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
LOW |
3.8 |
2026-07-06 |
||||
HIGH |
HIGH |
8.8 |
2026-07-06 |
||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
|||||||
HIGH |
Externe Referenzen
| Bezeichnung | Typ | CVE | Quelle |
|---|---|---|---|
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CERT-Bund (BSI) | government_cert | - | de | https://wid.cert-bund.de/content/public/securityAdvisory/rss |