Is CVE-2026-116070 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-116070?

CVE-2026-116070 has a CVSS v3 severity of MEDIUM (6.5).

Back

CVE-2026-116070

Description

Docker-Proxy through 5.1.9 contains a missing authentication vulnerability in the hubcmdui routes/config.js that allows unauthenticated attackers to read and overwrite configuration via /api/config. Attackers can retrieve the WeChat webhook URL and Telegram bot token, and overwrite menuItems links, proxyDomain, and the monitoring webhook destination receiving alerts.