{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"github.com/portainer/portainer","cve_ids":["CVE-2026-55761"],"ecosystem":"Go","epss":0.00493,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-x626-fcwx-f5pc","id":"tcs_01M5KGT7YEN3WVXYZ5JD5B36M9","modified_at":"2026-09-02T19:45:12.634762853Z","published_at":"2026-09-02T18:37:27Z","references":["https://osv.dev/vulnerability/GO-2026-6324","https://github.com/portainer/portainer/security/advisories/GHSA-x626-fcwx-f5pc","https://nvd.nist.gov/vuln/detail/CVE-2026-55761","https://github.com/portainer/portainer/commit/49f19107cf9a3540cbe406c9eb7f24390e1af02b","https://github.com/portainer/portainer/commit/d2b56efcb4e43c4168bb6688eee9f6bf22867312","https://github.com/portainer/portainer/issues/2770","https://github.com/portainer/portainer/releases/tag/2.39.4","https://github.com/portainer/portainer/releases/tag/2.43.0"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GO-2026-6324","url":"https://osv.dev/vulnerability/GO-2026-6324"},{"source":"nvd","source_id":"CVE-2026-55761","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55761"}],"summary":"Portainer has Unauthenticated Restore Endpoint that Allows Admin Takeover on Uninitialized Instances in github.com/portainer/portainer"}