{"vulnerability": "CVE-2026-72740", "sightings": [{"uuid": "0a2e54e1-41dc-43d5-846a-0aa9021d24eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72740", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/aemh5cwnsrtqh", "content": "CVE-2026-72740 - Dokploy: OS Command Injection via SSH-form `customGitUrl` domain in `ssh-keyscan`\nCVE ID : CVE-2026-72740\n \n Published : Aug. 10, 2026, 6:18 p.m. | 11\u00a0minutes ago\n \n Description : Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13,...", "creation_timestamp": "2026-08-10T18:38:58.635822Z"}, {"uuid": "9904477e-147f-4afb-a32e-e28bd089e9b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72740", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msqta4hrup2b", "content": "CVE-2026-72740\nDokploy users with deployment permission and SSH keys can execute arbitrary commands on the Dokploy server, potentially leading to unauthorized access or data loss. To fix this, update to Dokploy version\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-10T19:24:05.888288Z"}]}