[NEW] [high] Coolify: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Coolify to execute arbitrary code, escalate privileges, disclose information, present false information, manipulate files, conduct a denial of service attack, and bypass security measures.
CSIRTS triage
- What
- An attacker can exploit multiple vulnerabilities in Coolify to execute arbitrary code and escalate privileges.
- Who is affected
- Deployments of Coolify are affected.
- Urgency
- Remediation is urgent due to the high severity of the vulnerabilities.
- Action
- Apply the latest patches provided by Coolify.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Coolify
Get an email when a new Coolify advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2192
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Moderate exploitation riskCVE-2025-662093.8% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 89% of all scored CVEs.
- Moderate exploitation riskCVE-2025-662133.0% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 86% of all scored CVEs.
- Low exploitation riskCVE-2026-327180.21% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 12% of all scored CVEs.
- Low exploitation riskCVE-2026-340340.40% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 32% of all scored CVEs.
- Low exploitation riskCVE-2026-340370.25% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 16% of all scored CVEs.
- Low exploitation riskCVE-2026-340440.24% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 15% of all scored CVEs.
- Low exploitation riskCVE-2026-340470.37% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 29% of all scored CVEs.
- Low exploitation riskCVE-2026-340480.40% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 33% of all scored CVEs.
- Low exploitation riskCVE-2026-340500.21% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 12% of all scored CVEs.
- Low exploitation riskCVE-2026-340570.35% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 27% of all scored CVEs.
Referenced CVEs
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- highCVE-2026-34158: Coolify is an open-source and self-hostable tool for managing servers, applications, and datab…nvd
- highCVE-2026-42200: Coolify is an open-source and self-hostable tool for managing servers, applications, and datab…nvd
- lowCVE-2026-42172: Coolify is an open-source and self-hostable tool for managing servers, applications, and datab…nvd
- mediumCVE-2026-42147: Coolify is an open-source and self-hostable tool for managing servers, applications, and datab…nvd
- lowCVE-2026-42145: Coolify is an open-source and self-hostable tool for managing servers, applications, and datab…nvd
- highCVE-2026-42143: Coolify is an open-source and self-hostable tool for managing servers, applications, and datab…nvd
- mediumCVE-2026-34198: Coolify is an open-source and self-hostable tool for managing servers, applications, and datab…nvd
- highCVE-2026-34171: Coolify is an open-source and self-hostable tool for managing servers, applications, and datab…nvd
- mediumCVE-2026-34170: Coolify is an open-source and self-hostable tool for managing servers, applications, and datab…nvd
- highCVE-2026-34152: Coolify is an open-source and self-hostable tool for managing servers, applications, and datab…nvd
- lowCVE-2026-34149: Coolify is an open-source and self-hostable tool for managing servers, applications, and datab…nvd
- highCVE-2026-34057: Coolify is an open-source and self-hostable tool for managing servers, applications, and datab…nvd
Recent advisories for Coolify
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- highCVE-2026-59734: Coolify is an open-source and self-hostable tool for managing servers, applications, and datab…nvd · 2026-07-09
- high[NEW] [high] Coolify: Vulnerability allows code execution and disclosurecert-bund · 2026-07-07
- lowCVE-2026-42201: Coolify is an open-source and self-hostable tool for managing servers, applications, and datab…nvd · 2026-07-07
- highCVE-2026-34158: Coolify is an open-source and self-hostable tool for managing servers, applications, and datab…nvd · 2026-07-07
- highCVE-2026-42200: Coolify is an open-source and self-hostable tool for managing servers, applications, and datab…nvd · 2026-07-07
- lowCVE-2026-42172: Coolify is an open-source and self-hostable tool for managing servers, applications, and datab…nvd · 2026-07-07
More from CERT-Bund (BSI) Security Advisories
- medium[NEW] [medium] DENX U-Boot: Multiple vulnerabilities allow execution of arbitrary code and DoS2026-07-10
- medium[NEW] [medium] Samsung Android: Multiple vulnerabilities2026-07-10
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow denial of service2026-07-10
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow unspecified attack2026-07-10
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow denial of service2026-07-10