portainer portainer

Name: portainer portainer
Brand: portainer

productUS

cpe:2.3:a:portainer:portainer:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

7critical6high7medium0low

updated 2026-10-26

vulnerabilities (26)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-19466US	critical9.8	3.72% (90th)	Exploit	1.20.0	2019-03-27	< 1.20.0
CVE-2024-29296US	—	1.25% (69th)	Exploit	no fix	2024-04-10	= 2.19.4
CVE-2026-44881US	critical9.9	0.51% (43rd)	Exploit	2.33.8	2026-05-28	3 versions
CVE-2026-44848US	high8.8OT high	0.40% (34th)	Exploit	2.33.8	2026-05-28	3 versions
CVE-2020-24264US	critical9.8OT elevated	4.12% (91st)	—	no fix	2021-03-16	≤ 1.24.1
CVE-2018-12678US	critical9.8	2.31% (83rd)	—	1.18.0	2018-06-22	< 1.18.0
CVE-2022-24961US	critical9.8	1.64% (76th)	—	2.11.1	2022-02-11	< 2.11.1
CVE-2020-24263US	high8.8	1.60% (76th)	—	no fix	2021-03-16	≤ 1.24.1
CVE-2018-19367US	critical9.8	1.47% (74th)	—	no fix	2018-11-20	≤ 1.19.2
CVE-2019-16872US	critical9.9	1.35% (71st)	—	1.22.1	2019-11-07	< 1.22.1
CVE-2019-16876US	high7.5	1.35% (71st)	—	1.22.1	2019-11-07	< 1.22.1
CVE-2019-16877US	high8.8	1.04% (64th)	—	1.22.1	2019-11-07	< 1.22.1
CVE-2019-16874US	medium6.5	0.89% (59th)	—	1.22.1	2019-11-07	< 1.22.1
CVE-2018-16316US	medium5.4	0.79% (56th)	—	no fix	2018-09-01	≤ 1.19.1
CVE-2021-42650US	medium6.1	0.63% (50th)	—	2.9.1	2021-10-18	< 2.9.1
CVE-2024-33661US	—	0.62% (50th)	—	2.20.0	2024-04-26	< 2.20.0
CVE-2026-44885US	—	0.61% (49th)	—	2.33.8	2026-05-28	2.33.0 → 2.33.8
CVE-2019-16873US	medium5.4	0.52% (44th)	—	1.22.1	2019-11-07	< 1.22.1
CVE-2019-16878US	medium5.4	0.52% (44th)	—	1.22.1	2019-11-07	< 1.22.1
CVE-2026-55761US	medium5.9	0.49% (42nd)	—	2.43.0	2026-07-08	2 versions
CVE-2026-44849US	high8.8OT elevated	0.43% (37th)	—	2.39.1	2026-05-28	3 versions
CVE-2026-44882US	—OT elevated	0.34% (27th)	—	2.33.8	2026-05-28	2.33.0 → 2.33.8
CVE-2026-44883US	high7.5	0.29% (21st)	—	2.41.0	2026-05-28	3 versions
CVE-2024-33662US	—OT elevated	0.28% (21st)	—	2.20.2	2024-10-02	< 2.20.2
CVE-2026-44884US	medium6.5OT elevated	0.26% (17th)	—	2.33.8	2026-05-28	2 versions
CVE-2026-44850US	—OT elevated	0.23% (14th)	—	2.39.1	2026-05-28	3 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4 CVEs
CWE-862Missing Authorization4 CVEs
CWE-863Incorrect Authorization3 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-264CWE-2642 CVEs
CWE-287Improper Authentication2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-284Improper Access Control1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE26 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan