#Self-Hosted
All CosmicBytez Labs articles tagged #Self-Hosted, across news, security advisories, how-to guides, and projects.
- Project
Cloudflare Zero Trust Tunnel: Secure Remote Access Without Open Ports
Expose self-hosted homelab services to the internet with zero inbound firewall rules, using cloudflared tunnels and Cloudflare Access policies for...
- News
GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers
GitLab fixed a critical CVSS 9.9 flaw in its AI Gateway letting authenticated Duo Agent Platform users execute commands on self-hosted servers.
- Security
Critical Argument Injection in Fireshare Lets Attackers Overwrite Files
CVE-2026-54337 lets unauthenticated attackers inject ffmpeg arguments via Fireshare's video upload endpoint to write or overwrite arbitrary files.
- Project
Headscale: Self-Hosted Tailscale Control Server for Zero-Trust Mesh VPN
Replace Tailscale's cloud coordination server with a self-hosted Headscale instance, then lock the tailnet down with ACL policies, tagged nodes, and a...
- HOWTO
Deploying Vaultwarden: A Self-Hosted Password Manager
Stand up a lightweight, Bitwarden-compatible password vault on your own infrastructure — with Docker, TLS via reverse proxy, and an automated backup routine.
- News
Hackers Exploit Critical Auth Bypass in Official Gitea Docker Image
Attackers are actively exploiting a critical authentication bypass in the official Gitea Docker image, allowing unauthenticated users to impersonate any...
- Security
Coolify CVE-2026-34037: CVSS 9.9 IDOR Enables Cross-Team Resource Takeover
A critical IDOR vulnerability in Coolify's cloneTo() Livewire action allows authenticated users to clone and take over resources across team boundaries...
- Security
CVE-2026-34038: Critical Coolify RCE via Authenticated Command Injection (CVSS 9.9)
A critical command injection vulnerability in Coolify's deployment pipeline allows any authenticated user with write access to execute arbitrary OS...
- News
Gitea Vulnerability Exposes Private Container Images without Authentication
A Gitea flaw lets unauthenticated remote attackers pull private container images from self-hosted deployments with no account or credentials required.
- Security
CVE-2026-27130 — Dokploy OS Command Injection via appName
Dokploy versions 0.26.6 and below contain a critical OS command injection vulnerability in the appName parameter, enabling unauthenticated remote code...
- Project
Self-Hosted Password Manager with Vaultwarden
Deploy a fully self-hosted, Bitwarden-compatible password manager using Vaultwarden on Docker with Caddy reverse proxy, automatic TLS, WebSocket...
- Project
Homelab Media Server with Full ARR Stack
Deploy a complete self-hosted media automation system with Plex, Sonarr, Radarr, Prowlarr, and more. Includes Traefik reverse proxy, Authentik SSO, and...