PT-2026-28526

🗓️ 26 Mar 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 11 Views

BuildKit before 0.28.1 allows access outside the repository via a subdirectory in the URL; upgrade to 0.28.1+ and avoid untrusted sources.

Reporter	Title	Published	Views	Family All 1467
GithubExploit	Exploit for Embedded Malicious Code in Aquasec Setup-Trivy	30 Mar 202615:43	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Mobyproject Moby	7 Jun 202611:56	–	githubexploit
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities addressed with IBM Business Automation Workflow cumulative fixes June 2026	29 Jun 202610:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an authorization bypass in Moby [CVE-2026-34040]	18 Jun 202619:43	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to authorization bypass due to the Moby package (CVE-2026-33997, CVE-2026-34040)	28 Jun 202619:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx.data integration is vulnerable to authorization bypass due to the Moby package (CVE-2026-33997, CVE-2026-34040)	7 Jul 202619:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands are vulnerable to arbitrary code execution, loss of confidentiality and denial of service	6 May 202613:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Local is affected by security vulnerabilities	9 Jul 202614:00	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Operator for PostgreSQL	23 Jun 202603:15	–	ibm
ATTACKERKB	CVE-2026-33748	27 Mar 202614:00	–	attackerkb

Source	Link
suse	www.suse.com/security/cve/CVE-2026-33028
osv	www.osv.dev/vulnerability/ghsa-4vrq-3vrq-g6gg
suse	www.suse.com/security/cve/CVE-2026-34388
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-41110
docs	www.docs.bell-sw.com/security/cves/CVE-2026-33748
osv	www.osv.dev/vulnerability/CVE-2020-13401
suse	www.suse.com/security/cve/CVE-2026-34385
suse	www.suse.com/security/cve/CVE-2026-27018
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-32280
osv	www.osv.dev/vulnerability/CVE-2023-26054

23 Jun 2026 00:00Current

5.9Medium risk

Vulners AI Score5.9

CVSS 48.2 - 9.4

CVSS 3.18.8 - 9.8

EPSS0.60368

SSVC