Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Dockyard is a Docker container management app. Prior to 1.1.0, Docker container start and stop operations are performed through GET requests without CSRF protection. A remote attacker can cause a logged-in administrator's browser to request /apps/action.php?action=stop&name=<container> or /apps/action.php?action=start&name=<container>, which starts or stops the target container. This vulnerability is fixed in 1.1.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-39848 Cross-Site Request Forgery in Dockyard Docker Container Management Before 1.1.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-39848
Post summary
The text announces CVE-2026-39848 as a CSRF flaw in Dockyard Docker Container Management prior to version 1.1.0, offering only a nominal description without evidence of an exploit, tool or patch.
CVE-2026-39848 Dockyard is a Docker container management app. Prior to 1.1.0, Docker container start and stop operations are performed through GET requests without CSRF protection. … https://www.cve.org/CVERecord?id=CVE-2026-39848
Post summary
The message discloses that Dockyard’s container start/stop actions were exposed via unauthenticated GET requests before version 1.1.0, but it provides no PoC, exploit details, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | 10ij | dockyard | - | - | - |