Dokans vulnerabilities

1 known vulnerability in Dokans from Amcoders. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Dokans: Improper Authentication

  CVE-2025-70841Feb 3, 2026Amcoders

  Dokans Multi-Tenancy Based eCommerce Platform SaaS 3.9.2 allows unauthenticated remote attackers to obtain sensitive application configuration data via direct request to /script/.env file. The exposed file contains Laravel application encryption key (APP_KEY),