UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-74756
Some docker-compose shipped by the project exposes by default Webadmin REST API publically without proper authentication setup. Version 3.9.1 onward sets a random credential by default on unprotected webadmin endpoints to prevent this while retain convenience.
Properties
- Last source
- NVD
- Nvd fetched at
- 2026-11-07T06:40:34.987550+00:00
- Cve id
- CVE-2026-74756
- First seen by Signal
- 2026-11-06T14:20:47+00:00
- Name
- CVE-2026-74756
- Retrieved at
- 2026-11-07T06:41:39+00:00
- Published at
- 2026-11-06T12:17:21.657
- Last modified
- 2026-11-06T19:17:56.813
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph