Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Portainer

First CVE: Jun 22, 2018Active for: 8 yearsTotal CVEs: 26
44.2
VTI Score
High

Portainer provides a widely adopted web-based management interface for Docker and Kubernetes container orchestration platforms, positioning itself as a control plane for containerized infrastructure. The vendor's vulnerability profile concentrates in its flagship Portainer product and skews strongly toward critical-severity outcomes, reflecting the sensitive nature of container management and the broad operational access that the interface grants. The recurring weakness classes—cross-site scripting, authorization and access-control flaws, and path-traversal conditions—are characteristic of web-based administrative tools that must manage authentication at scale and defend against both direct and browser-based attacks. Defenders should treat Portainer advisories as high-priority given its privileged position in container environments, where a compromise can propagate across workload clusters; current exploitation activity and severity counts are shown alongside this summary.

FAUCET AI Generated
26
Total CVEs
More Total CVEs than 97% of tracked vendors
4.3
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 97% of tracked vendors
7.8
Avg CVSS Score
Higher Avg CVSS Score than 76% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Portainer over time

Volume of CVEsAvg CVSS Base Score
First CVE
Jun 22, 2018
8 years ago
Most Recent CVE
Jul 8, 2026
16 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (26 CVEs).

26 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2026-44881CRITICAL
Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. Fro
May 28, 20269.940NONO
CVE-2026-44850HIGH
Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. Fro
May 28, 20268.535NONO
CVE-2026-44848HIGH
Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. Fro
May 28, 20268.834NONO
CVE-2026-44882HIGH
Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. Fro
May 28, 20268.134NONO
CVE-2026-44849HIGH
Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. Fro
May 28, 20268.833NONO
CVE-2026-44883HIGH
Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. Fro
May 28, 20267.531NONO
CVE-2022-24961CRITICAL
In Portainer Agent before 2.11.1, an API server can continue running even if not associated with a Portainer instance in the past few days.
Feb 11, 20229.831NONO
CVE-2020-24264CRITICAL
Portainer 1.24.1 and earlier is affected by incorrect access control that may lead to remote arbitrary code execution. The restriction checks for bind mounts are applied only on th
Mar 16, 20219.831NONO
CVE-2018-19466CRITICAL
A vulnerability was found in Portainer before 1.20.0. Portainer stores LDAP credentials, corresponding to a master password, in cleartext and allows their retrieval via API calls.
Mar 27, 20199.831NONO
CVE-2018-19367CRITICAL
Portainer through 1.19.2 provides an API endpoint (/api/users/admin/check) to verify that the admin user is already created. This API endpoint will return 404 if admin was not crea
Nov 20, 20189.830NONO
View all 26 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products26 CVEs
35%
35%
31%
Severity distribution among all CVEs352,294 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network26 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low23 (88.5%)
High3 (11.5%)
Unknown0 (0.0%)
User Interaction
None21 (80.8%)
Unknown0 (0.0%)
Required5 (19.2%)
Privileges Required
Low14 (53.8%)
High1 (3.8%)
None11 (42.3%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (26 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Portainer.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Portainer — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Portainer's Products

View all 2 CNAs →

Top CWEs