Daily Digest
The single most urgent item is CVE-2026-9586 (Sangoma Switchvox → PostgreSQL SQL injection), confirmed actively exploited per CISA KEV with a due date of 2026-09-05; all other findings, including critical CVSS scores, remain theoretical or unconfirmed exploitation and must be patched in parallel.
Summary: Dokploy database deployment functions pass user-controlled `dockerImage` values unquoted into `docker pull` shell commands on the remote-server path, allowing command injection.
Affected Features / Interoperability: Remote-server deployment of MariaDB, MongoDB, MySQL, Postgres, Redis, LibSQL via Dokploy.
Source: GHSA-6jrh-8qmg-jj3p, v0.29.13 release
Actions:
Summary: Dokploy `backup.restoreBackupWithLogs` passes `databaseName` into nested shell text executed by Node.js `exec`; an authenticated user with `backup:restore` permission can achieve arbitrary command execution in the Docker-privileged host context.
Affected Features / Interoperability: Backup/restore for PostgreSQL, MariaDB, MySQL, MongoDB.
Source: GHSA-f7mp-9jfp-mjrr, PR #4862
Actions:
Summary: Budibase MySQL integration runs with `multipleStatements: true`, allowing attackers to inject malicious SQL through user input fields and compromise the database.
Affected Features / Interoperability: Budibase MySQL integration component.
Source: GHSA-q6x4-v3qx-85qw, v3.40.0 release
Actions:
The most urgent item in this scope is CVE-2026-83711 (CVSS 10.0), an authorization bypass in Microsoft Azure Active Directory B2C that allows an unauthorized attacker to elevate privileges over a network via a user-controlled key — a network-reachable, authentication-free exploit at the maximum severity rating. No CISA KEV-confirmed entries appear in this scope's data, so CVSS severity drives prioritization; the next tier consists of multiple CVSS 9.9 critical Docker/Dokploy vulnerabilities and CVSS 9.6 Kubernetes RBAC flaws. Healthcare organizations running Azure AD B2C for patient-facing authentication or federated identity should treat this as the top remediation