CloudMap 漏洞情报库

高危CVE-2026-424612026/09/30

Arcane < 1.18.0 - Unauthenticated Template and Env Disclosure

Arcane < 1.18.0 contains an information disclosure caused by missing authorization on /api/templates GET endpoints, letting unauthenticated network clients read sensitive Compose YAML and .env content, exploit requires network access

ArcanePoC 已收录

CVSS—

高危CVE-2026-402422026/06/25

Arcane <= 1.17.2 - Server-Side Request Forgery

Arcane <= 1.17.3 contains an unauthenticated server-side request forgery caused by lack of URL scheme and host validation in /api/templates/fetch endpoint, letting remote attackers perform SSRF, exploit requires no authentication.

ArcanePoC 已收录

CVSS—

低危2026/06/25

Arcane Login Panel - Detect

Detects the presence of the Arcane login panel, a modern Docker management platform.

ArcanePoC 已收录

CVSS—

Arcane

关联漏洞

Arcane < 1.18.0 - Unauthenticated Template and Env Disclosure

Arcane <= 1.17.2 - Server-Side Request Forgery

Arcane Login Panel - Detect