ROS-20260524-73-0027

🗓️ 24 May 2026 00:00:00Reported by RedosType

redos

redos🔗 redos.red-soft.ru👁 14 Views

Docker Community Edition vulnerability lets remote attackers bypass authentication via an alternate path or channel.

Reporter	Title	Published	Views	Family All 337
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an authorization bypass in Moby [CVE-2026-34040]	18 Jun 202619:43	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to authorization bypass due to the Moby package (CVE-2026-33997, CVE-2026-34040)	28 Jun 202619:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Operator for PostgreSQL	23 Jun 202603:15	–	ibm
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Mobyproject Moby	7 Jun 202611:56	–	githubexploit
ATTACKERKB	CVE-2026-34040	31 Mar 202601:36	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : docker (ALAS2023-2026-1615)	30 Apr 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : docker, --advisory ALAS2DOCKER-2026-111 (ALASDOCKER-2026-111)	30 Apr 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : docker, --advisory ALAS2ECS-2026-108 (ALASECS-2026-108)	14 May 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : docker, --advisory ALAS2NITRO-ENCLAVES-2026-097 (ALASNITRO-ENCLAVES-2026-097)	30 Apr 202600:00	–	nessus
Tenable Nessus	Docker Engine 29.3.1 Multiple Vulnerabilities	3 Apr 202600:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
redos	7.3	x86_64	docker-ce docker-ce-cli docker-ce-cli-doc docker-ce-cli-fish-completion docker-ce-cli-zsh-completion docker-ce-rootless-extras показать все свернуть	29.3.1	UNKNOWN

24 May 2026 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.8 - 8.8

EPSS0.08123

SSVC

Docker Community Edition remote attackers bypass authentication alternate path security restrictions