{"kind": "product", "path": "vulns/ubuntu-26.10/docker.io-app", "name": "docker.io-app", "product": "docker.io-app", "ecosystem": "Ubuntu:26.10", "items": [{"id": "CVE-2026-92543", "noindex": false, "published": "2026-10-07T16:44:21.237Z", "modified": "2026-10-07T20:31:28.770Z", "cvss": 7.6, "cvss_vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.00087, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-92543", "title": "Docker Engine insecure-registry fallback via malicious DNS responses", "description": "Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Because the transport re-dials the hostname rather than the CIDR-matching address, a DNS answer set of one loopback IP plus a non-loopback attacker IP disables certificate verification and enables HTTP fallback for the registry connection.", "references": ["https://github.com/moby/moby/security/advisories/GHSA-7cfq-22r6-qp73", "https://nvd.nist.gov/vuln/detail/CVE-2026-92543"], "fixes": [], "products": [{"name": "docker.io-app", "path": "vulns/ubuntu-26.10/docker.io-app", "ecosystem": "Ubuntu:26.10"}]}, {"id": "CVE-2026-92542", "noindex": false, "published": "2026-10-07T16:42:20.998Z", "modified": "2026-10-07T20:30:49.884Z", "cvss": 6.9, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00068, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-92542", "title": "Blind VXLAN injection into encrypted overlay networks from cluster peer", "description": "The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec parameters which meets the following criteria:\n\n- UDP datagram\n- Destination port is the Swarm data-path port\n- Datagram starts with a VXLAN header for the VNI of an encrypted overlay network which any running container on the node is connected to", "references": ["https://github.com/moby/moby/security/advisories/GHSA-6m9p-4h64-m6vh", "https://nvd.nist.gov/vuln/detail/CVE-2026-92542"], "fixes": [], "products": [{"name": "docker.io-app", "path": "vulns/ubuntu-26.10/docker.io-app", "ecosystem": "Ubuntu:26.10"}]}, {"id": "CVE-2026-93321", "noindex": false, "published": "2026-10-05T22:00:54.477Z", "modified": "2026-10-06T13:25:37.712Z", "cvss": 6.9, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00155, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-93321", "title": "Malformed LLB file operation can crash buildkitd", "description": "A malicious frontend can submit an LLB definition that causes buildkitd\nto panic and terminate, interrupting all builds running on that daemon.", "references": ["https://github.com/moby/buildkit/security/advisories/GHSA-fjj4-h6vf-m9hj", "https://github.com/moby/buildkit/releases/tag/v0.33.1", "https://nvd.nist.gov/vuln/detail/CVE-2026-93321"], "fixes": [], "products": [{"name": "docker.io-app", "path": "vulns/ubuntu-26.10/docker.io-app", "ecosystem": "Ubuntu:26.10"}]}, {"id": "CVE-2026-93315", "noindex": false, "published": "2026-10-05T21:57:08.053Z", "modified": "2026-10-06T13:27:23.994Z", "cvss": 5.8, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:L/SA:N", "severity": "medium", "epss": 0.00096, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-93315", "title": "BuildKit proxy CA cleanup can be disrupted by build steps", "description": "When proxy networking with CA injection is enabled, a build can modify its CA bundle before cleanup. This may cause cleanup to block, operate outside the build rootfs, or fail without failing the build.", "references": ["https://github.com/moby/buildkit/security/advisories/GHSA-2f5p-x9ph-g97x", "https://github.com/moby/buildkit/releases/tag/v0.33.1", "https://nvd.nist.gov/vuln/detail/CVE-2026-93315"], "fixes": [], "products": [{"name": "docker.io-app", "path": "vulns/ubuntu-26.10/docker.io-app", "ecosystem": "Ubuntu:26.10"}]}, {"id": "CVE-2026-93326", "noindex": false, "published": "2026-10-05T20:13:27.383Z", "modified": "2026-10-06T13:48:34.715Z", "cvss": 6, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00249, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-93326", "title": "Crafted Git build source can bypass certain policy validation", "description": "A build step for a Git source, crafted in a specific way, can bypass some policy validation rules. A malicious build definition can make the repository look like it is coming from a different remote URL than it really is when Git clone is happening. If policy is doing more stricter validation, for example based on commit SHA, commit data, or signatures, then all these validations still apply correctly.", "references": ["https://github.com/moby/buildkit/security/advisories/GHSA-66hf-6vf5-87hc", "https://github.com/moby/buildkit/releases/tag/v0.33.1", "https://nvd.nist.gov/vuln/detail/CVE-2026-93326"], "fixes": [], "products": [{"name": "docker.io-app", "path": "vulns/ubuntu-26.10/docker.io-app", "ecosystem": "Ubuntu:26.10"}]}, {"id": "CVE-2026-93323", "noindex": false, "published": "2026-10-05T17:57:12.252Z", "modified": "2026-10-05T18:47:42.179Z", "cvss": 6.8, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00107, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-93323", "title": "Oversized Dockerfile or .dockerignore can exhaust buildkitd memory", "description": "The Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context into memory without a size limit. A build context containing an oversized file could make buildkitd allocate memory proportional to that file, potentially exhausting memory and terminating the daemon, which interrupts other builds on the same instance. Fixed by rejecting such files above 16 MiB.", "references": ["https://github.com/moby/buildkit/security/advisories/GHSA-mgqf-486f-49vp", "https://github.com/moby/buildkit/releases/tag/v0.33.1", "https://nvd.nist.gov/vuln/detail/CVE-2026-93323"], "fixes": [], "products": [{"name": "docker.io-app", "path": "vulns/ubuntu-26.10/docker.io-app", "ecosystem": "Ubuntu:26.10"}]}, {"id": "CVE-2026-93322", "noindex": false, "published": "2026-10-05T17:53:50.583Z", "modified": "2026-10-05T18:51:34.926Z", "cvss": 6.9, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00125, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-93322", "title": "Malformed MergeOp can crash the BuildKit daemon", "description": "A malicious frontend can submit an LLB definition that causes buildkitd\nto panic and terminate, interrupting all builds running on that daemon.", "references": ["https://github.com/moby/buildkit/security/advisories/GHSA-cv6p-7w7g-xjwq", "https://github.com/moby/buildkit/releases/tag/v0.33.1", "https://nvd.nist.gov/vuln/detail/CVE-2026-93322"], "fixes": [], "products": [{"name": "docker.io-app", "path": "vulns/ubuntu-26.10/docker.io-app", "ecosystem": "Ubuntu:26.10"}]}, {"id": "CVE-2026-93320", "noindex": false, "published": "2026-10-05T17:50:44.195Z", "modified": "2026-10-05T18:52:25.223Z", "cvss": 6, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:H/SA:H", "severity": "medium", "epss": 0.00114, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-93320", "title": "BuildKit improperly handles special files in build snapshots", "description": "BuildKit may be tricked into performing file actions with special file inodes where regular files are expected. Special files may block operations or, on rootful workers, allow unintended host device access.", "references": ["https://github.com/moby/buildkit/security/advisories/GHSA-9728-qjrv-2xh2", "https://github.com/moby/buildkit/releases/tag/v0.33.1", "https://nvd.nist.gov/vuln/detail/CVE-2026-93320"], "fixes": [], "products": [{"name": "docker.io-app", "path": "vulns/ubuntu-26.10/docker.io-app", "ecosystem": "Ubuntu:26.10"}]}, {"id": "CVE-2026-93319", "noindex": false, "published": "2026-10-05T17:47:22.297Z", "modified": "2026-10-05T19:07:12.038Z", "cvss": 5.7, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00089, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-93319", "title": "A malicious frontend can cause a daemon panic", "description": "A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data race that can cause the BuildKit daemon to panic.", "references": ["https://github.com/moby/buildkit/security/advisories/GHSA-4hgw-qrhw-fhg8", "https://github.com/moby/buildkit/releases/tag/v0.33.1", "https://nvd.nist.gov/vuln/detail/CVE-2026-93319"], "fixes": [], "products": [{"name": "docker.io-app", "path": "vulns/ubuntu-26.10/docker.io-app", "ecosystem": "Ubuntu:26.10"}]}, {"id": "CVE-2026-93318", "noindex": false, "published": "2026-10-05T17:45:39.491Z", "modified": "2026-10-05T19:06:41.297Z", "cvss": 7.5, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.00167, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-93318", "title": "Cache poisoning via unvalidated image layer DiffIDs", "description": "A malicious image can advertise DiffIDs from another image while containing different layer contents. In affected versions, BuildKit could use the advertised DiffIDs to derive cache and snapshot identity without validating that they matched the actual layer contents.\n\nIf a BuildKit daemon with shared or persistent cache first processes such a malicious image, a later build using the victim image may mount the attacker-controlled layer contents as the base image. This can allow code from the malicious image to run in the victim build, for example by replacing a commonly executed path such as /bin/sh. The attacker-controlled code may read build", "references": ["https://github.com/moby/buildkit/security/advisories/GHSA-f2v9-hprr-32q3", "https://github.com/moby/buildkit/releases/tag/v0.33.1", "https://nvd.nist.gov/vuln/detail/CVE-2026-93318"], "fixes": [], "products": [{"name": "docker.io-app", "path": "vulns/ubuntu-26.10/docker.io-app", "ecosystem": "Ubuntu:26.10"}]}, {"id": "CVE-2026-93317", "noindex": false, "published": "2026-10-05T17:43:44.903Z", "modified": "2026-10-05T19:06:09.645Z", "cvss": 5.9, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:L/SA:N", "severity": "medium", "epss": 0.00162, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-93317", "title": "Container blob cache can accept unverified content", "description": "An unauthenticated attacker controlling a registry or OCI-layout blob source could provide blob contents that did not match the claimed digest. The resulting snapshot could be cached under that digest and reused by a later victim build, compromising build-input integrity.", "references": ["https://github.com/moby/buildkit/security/advisories/GHSA-p3rc-w3hc-pqvv", "https://github.com/moby/buildkit/releases/tag/v0.33.1", "https://nvd.nist.gov/vuln/detail/CVE-2026-93317"], "fixes": [], "products": [{"name": "docker.io-app", "path": "vulns/ubuntu-26.10/docker.io-app", "ecosystem": "Ubuntu:26.10"}]}, {"id": "CVE-2026-93316", "noindex": false, "published": "2026-10-05T17:42:12.969Z", "modified": "2026-10-05T19:05:36.514Z", "cvss": 7.1, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.00235, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-93316", "title": "Starting daemon with --cdi-disabled flag can lead to panic on specific builds", "description": "If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciously or by accident.", "references": ["https://github.com/moby/buildkit/security/advisories/GHSA-r456-g3gm-cvxf", "https://github.com/moby/buildkit/releases/tag/v0.33.1", "https://nvd.nist.gov/vuln/detail/CVE-2026-93316"], "fixes": [], "products": [{"name": "docker.io-app", "path": "vulns/ubuntu-26.10/docker.io-app", "ecosystem": "Ubuntu:26.10"}]}, {"id": "CVE-2026-79994", "noindex": false, "published": "2026-09-15T20:33:21.074Z", "modified": "2026-09-16T17:57:02.176Z", "cvss": 8.7, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N", "severity": "high", "epss": 0.00139, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-79994", "title": "Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink race", "description": "The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname. A malicious guest can replace an intermediate directory with a symlink between validation and connection, causing the host to connect to an arbitrary AF_UNIX socket outside the shared workspace. This can expose data or host-side capabilities provided by the targeted socket.", "references": ["https://docs.docker.com/ai/sandboxes/", "https://docs.docker.com/ai/sandboxes/security/isolation/", "https://github.com/docker/sailor/pull/2021"], "fixes": [], "products": [{"name": "docker.io-app", "path": "vulns/ubuntu-26.10/docker.io-app", "ecosystem": "Ubuntu:26.10"}]}, {"id": "CVE-2026-17106", "noindex": false, "published": "2026-08-18T18:35:13.465Z", "modified": "2026-08-19T03:56:16.526Z", "cvss": 7.1, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.0044, "kev": false, "exploits": ["github-poc", "public-poc"], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-17106", "title": "Tar extraction in moby/go-archive can write outside the destination directory via link following", "description": "The tar extraction routines in moby/go-archive (Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers) do not confine filesystem operations to the destination directory. The extractor decides where each archive entry lands using lexical string checks and then performs the filesystem operation on a path that is resolved by the OS, so links introduced by the archive can be followed out of the destination directory. An attacker who controls the contents of an archive can create or overwrite files at arbitrary paths writable by the extracting process.", "references": ["https://github.com/moby/go-archive/security/advisories/GHSA-hfg8-hc9c-6c3h", "https://docs.docker.com/desktop/release-notes/#4860", "https://github.com/docker/sbx-releases/releases/tag/v0.38.0"], "fixes": [], "products": [{"name": "docker.io-app", "path": "vulns/ubuntu-26.10/docker.io-app", "ecosystem": "Ubuntu:26.10"}]}, {"id": "CVE-2026-15793", "noindex": false, "published": "2026-07-21T16:10:21.790Z", "modified": "2026-07-21T16:58:40.200Z", "cvss": 6.5, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00202, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-15793", "title": "Git source checkout from a bundle file could lead to command injection", "description": "BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when checking out Git sources. If the Git source is malicious, this could lead to a crafted command invocation on the host.", "references": ["https://github.com/moby/buildkit/security/advisories/GHSA-hw3h-2gp9-cxpv", "https://nvd.nist.gov/vuln/detail/CVE-2026-15793"], "fixes": [], "products": [{"name": "docker.io-app", "path": "vulns/ubuntu-26.10/docker.io-app", "ecosystem": "Ubuntu:26.10"}]}, {"id": "CVE-2026-15792", "noindex": false, "published": "2026-07-21T16:10:21.395Z", "modified": "2026-07-21T17:01:55.840Z", "cvss": 6.3, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00243, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-15792", "title": "Possible panic when incorrect parameters sent from frontend", "description": "A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic.", "references": ["https://github.com/moby/buildkit/security/advisories/GHSA-qx3x-mv6r-52p6", "https://nvd.nist.gov/vuln/detail/CVE-2026-15792"], "fixes": [], "products": [{"name": "docker.io-app", "path": "vulns/ubuntu-26.10/docker.io-app", "ecosystem": "Ubuntu:26.10"}]}, {"id": "CVE-2026-15791", "noindex": false, "published": "2026-07-21T16:10:20.881Z", "modified": "2026-07-21T17:08:54.555Z", "cvss": 3.3, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N", "severity": "low", "epss": 0.00249, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-15791", "title": "LLB file operation can be tricked to remove /tmp directory contents", "description": "A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can normally be used to delete files inside the build container rootfs can escape into the real host temp directory.", "references": ["https://github.com/moby/buildkit/security/advisories/GHSA-32pv-7hq5-qhwq", "https://nvd.nist.gov/vuln/detail/CVE-2026-15791"], "fixes": [], "products": [{"name": "docker.io-app", "path": "vulns/ubuntu-26.10/docker.io-app", "ecosystem": "Ubuntu:26.10"}]}, {"id": "CVE-2026-42306", "noindex": false, "published": "2026-06-12T18:09:22.188Z", "modified": "2026-06-13T03:25:47.055Z", "cvss": 7.2, "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:H", "severity": "high", "epss": 0.00104, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-42306", "title": "Moby: Race condition in docker cp allows bind mount redirection to host path", "description": "Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to version 2.0.0-beta.14, a race condition during docker cp mount setup allows a malicious container to redirect a bind mount target to an arbitrary host path, potentially overwriting host files or causing denial of service. This issue has been patched in Docker Engine version 29.5.1 and Moby Daemon version 2.0.0-beta.14.", "references": ["https://github.com/moby/moby/security/advisories/GHSA-rg2x-37c3-w2rh", "https://nvd.nist.gov/vuln/detail/CVE-2026-42306"], "fixes": [], "products": [{"name": "docker.io-app", "path": "vulns/ubuntu-26.10/docker.io-app", "ecosystem": "Ubuntu:26.10"}]}, {"id": "CVE-2026-41568", "noindex": false, "published": "2026-06-12T18:08:43.914Z", "modified": "2026-06-12T20:01:58.963Z", "cvss": 6.1, "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:H", "severity": "medium", "epss": 0.00108, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-41568", "title": "Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap", "description": "Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to version 2.0.0-beta.14, a race condition during docker cp mount setup allows a malicious container to create empty files or directories at arbitrary absolute paths on the host filesystem. This issue has been patched in Docker Engine version 29.5.1 and Moby Daemon version 2.0.0-beta.14.", "references": ["https://github.com/moby/moby/security/advisories/GHSA-vp62-88p7-qqf5", "https://nvd.nist.gov/vuln/detail/CVE-2026-41568"], "fixes": [], "products": [{"name": "docker.io-app", "path": "vulns/ubuntu-26.10/docker.io-app", "ecosystem": "Ubuntu:26.10"}]}, {"id": "CVE-2026-41567", "noindex": false, "published": "2026-06-05T00:35:50.563Z", "modified": "2026-09-09T12:04:44.418Z", "cvss": 7.2, "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N", "severity": "high", "epss": 0.00155, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-41567", "title": "Docker: `PUT /containers/{id}/archive` executes container binary on the host", "description": "Moby is an open source container framework. In versions prior to 29.5.1 and in moby/moby v2 prior to v2.0.0-beta.14, when a compressed archive is uploaded to a container via `PUT /containers/{id}/archive` or piped through `docker cp -`, the daemon resolves decompression binaries (such as `xz` or `unpigz`) from the container's filesystem rather than the host's due to incorrect ordering of operations. A malicious container image containing a trojanized decompression binary can achieve arbitrary code execution with full daemon privileges, including host root UID and unrestricted capabilities, when a user uploads a compressed (xz or gzip) archive", "references": ["https://github.com/moby/moby/security/advisories/GHSA-x86f-5xw2-fm2r", "https://access.redhat.com/security/cve/CVE-2026-41567", "https://bugzilla.redhat.com/show_bug.cgi?id=2485356"], "fixes": [], "products": [{"name": "docker.io-app", "path": "vulns/ubuntu-26.10/docker.io-app", "ecosystem": "Ubuntu:26.10"}]}], "total": 25, "unknown_count": 0, "release_unconfirmed": false, "page": 1, "pages": 2, "filtered": false, "noindex": false, "filters": {}, "page_size": 20, "products": [{"name": "docker.io-app", "path": "vulns/ubuntu-26.10/docker.io-app", "ecosystem": "Ubuntu:26.10"}], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "web", "path": "vulns/stack/web", "slug": "web"}, {"name": "php", "path": "vulns/stack/php", "slug": "php"}, {"name": "python", "path": "vulns/stack/python", "slug": "python"}, {"name": "node", "path": "vulns/stack/node", "slug": "node"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}, {"name": "network", "path": "vulns/stack/network", "slug": "network"}, {"name": "applications", "path": "vulns/stack/applications", "slug": "applications"}], "versions": [], "stats": {"recent": 12, "kev": 0}, "lastmod": "2026-10-07T20:31:28.770Z", "early_advisories": [], "license": "You may freely use the PatchFirst selection and our additions (priorities, early warnings, texts, summaries and aggregates) for your own purposes, including internal business use. Resale, commercial distribution and bulk mirroring of this selection or these additions require a written agreement with the operator. Whenever you use or publish the selection or our additions, credit PatchFirst (https://patchfirst.dev/vulns/) with this link to the regional feed page. Original records from open sources remain subject to their respective licenses and terms. These conditions do not restrict your rights to the original data, which you can obtain directly from those sources.", "terms_url": "https://patchfirst.dev/vulns/#feed-terms", "attribution": {"name": "PatchFirst", "url": "https://patchfirst.dev/vulns/"}, "source_changes": "Records are selected, normalized and combined by PatchFirst; summaries and translations may be added. News is credited with a link to the original source in each entry.", "sources": [{"id": "cve", "name": "CVE List / CVE.org", "url": "https://www.cve.org/", "license": "CVE Terms of Use", "terms_url": "https://www.cve.org/Legal/TermsOfUse", "notice": "Copyright © 1999–2021, The MITRE Corporation. LICENSE Submissions : For all materials you submit to the Common Vulnerabilities and Exposures (CVE™), you hereby grant to The MITRE Corporation (MITRE) and all CVE Numbering Authorities (CNAs) a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute such materials and derivative works. Unless required by applicable law or agreed to in writing, you provide such materials on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. CVE Usage : MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. DISCLAIMERS ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE."}, {"id": "osv", "name": "OSV", "url": "https://osv.dev/", "terms_url": "https://google.github.io/osv.dev/data/", "terms": "Upstream licenses vary; see the source catalog."}, {"id": "kev", "name": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "license": "CC0-1.0", "terms_url": "https://github.com/cisagov/kev-data/blob/develop/LICENSE"}, {"id": "epss", "name": "FIRST EPSS", "url": "https://www.first.org/epss/", "terms_url": "https://www.first.org/epss/faq", "terms": "Free public scores; attribution requested (FIRST EPSS, scores generated by Empirical Security)."}, {"id": "github-advisory", "name": "GitHub Advisory Database", "url": "https://github.com/advisories", "license": "CC-BY-4.0", "terms_url": "https://github.com/github/advisory-database/blob/main/LICENSE.md"}, {"id": "exploitdb", "name": "Exploit-DB", "url": "https://www.exploit-db.com/", "license": "GPL-2.0", "terms_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/LICENSE.md"}, {"id": "metasploit", "name": "Metasploit", "url": "https://github.com/rapid7/metasploit-framework", "license": "BSD-3-Clause", "terms_url": "https://github.com/rapid7/metasploit-framework/blob/master/LICENSE", "notice": "Copyright (c) 2006-2026, Rapid7, Inc.\nLicense: BSD-3-clause\n Redistribution and use in source and binary forms, with or without modification,\n are permitted provided that the following conditions are met:\n .\n * Redistributions of source code must retain the above copyright notice,\n this list of conditions and the following disclaimer.\n .\n * Redistributions in binary form must reproduce the above copyright notice,\n this list of conditions and the following disclaimer in the documentation\n and/or other materials provided with the distribution.\n .\n * Neither the name of Rapid7, Inc. nor the names of its contributors\n may be used to endorse or promote products derived from this software\n without specific prior written permission.\n .\n THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\n ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\n WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR\n ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\n LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\n ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\n SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE."}, {"id": "nuclei", "name": "Nuclei Templates", "url": "https://github.com/projectdiscovery/nuclei-templates", "license": "MIT", "terms_url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/LICENSE.md", "notice": "MIT License\n\nCopyright (c) 2025 ProjectDiscovery, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."}, {"id": "linux-kernel", "name": "Linux kernel releases", "url": "https://www.kernel.org/", "license": "CC-BY-SA-4.0", "terms_url": "https://www.kernel.org/legal.html", "notice": "Copyright (C) 1997-2014 by The Linux Kernel Organization, Inc."}]}