{"vulnerability": "CVE-2026-72865", "sightings": [{"uuid": "6e3f77d1-366c-4840-8927-4a2db9c99ec8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72865", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msqtktram32n", "content": "CVE-2026-72865 - dokploy\nAn authenticated user with certain permissions can execute arbitrary system commands on the Dokploy server. This can allow them to delete or modify files, or even take control of the server.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dokploy #CVE #infosec", "creation_timestamp": "2026-08-10T19:30:05.793428Z"}, {"uuid": "502018a6-0ae6-4e9a-8643-52b134a657f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72865", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3msshk7sgiz23", "content": "CVE-2026-72865 - Critical RCE in Dokploy PaaS via unvalidated composePath leading to shell command injection in docker compose. CVSS 9.9. Unpatched. Update to 0.29.13+ immediately. #CVE #Dokploy #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-72865/", "creation_timestamp": "2026-08-11T11:00:19.767290Z"}, {"uuid": "dce161e0-abf9-4044-90c9-85f2ab8a3d03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72865", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117076526340814784", "content": "CVE-2026-72865 - Critical RCE in Dokploy PaaS via unvalidated composePath leading to shell command injection in docker compose. CVSS 9.9. Unpatched. Update to 0.29.13+ immediately. #CVE #Dokploy #infosec\nhttps://www.valtersit.com/cve/CVE-2026-72865/", "creation_timestamp": "2026-08-11T11:00:44.041045Z"}]}