CVE-2026-78122 docker-socket-proxy through 0.5.0 Insufficient Access Control Granularity Exposes Container Filesystems

docker-socket-proxy fails to properly gate read endpoints in the /containers Docker API namespace when the CONTAINERS environment variable is set. Attackers can use GET requests to /containers/id/archive, /containers/id/export, /containers/id/logs, and /containers/id/top to read arbitrary files a...

CVE-2026-78122 docker-socket-proxy through 0.5.0 Insufficient Access Control Granularity Exposes Container Filesystems

docker-socket-proxy fails to properly gate read endpoints in the /containers Docker API namespace when the CONTAINERS environment variable is set. Attackers can use GET requests to /containers/id/archive, /containers/id/export, /containers/id/logs, and /containers/id/top to read arbitrary files a...

CVE-2026-78122 docker-socket-proxy through 0.5.0 Insufficient Access Control Granularity Exposes Container Filesystems

docker-socket-proxy fails to properly gate read endpoints in the /containers Docker API namespace when the CONTAINERS environment variable is set. Attackers can use GET requests to /containers/id/archive, /containers/id/export, /containers/id/logs, and /containers/id/top to read arbitrary files a...

CVE-2026-78122

docker-socket-proxy (Tecnativa) through 0.5.0 has an insufficient access control granularity flaw in the /containers Docker API namespace. When the CONTAINERS environment variable is set, read endpoints (/containers/{id}/archive, /export, /logs, /top) are not properly gated, allowing an unauthent...

windows v6.05

Windows Windows inside a Docker container. Features ✨ Runs Windows inside a Docker container Automatic download and hands-free installation Supports modern and legacy Windows releases Near-native performance with KVM acceleration Customizable CPU, memory, and storage allocation Dynamic memory...

CVE-2026-78122: Insufficient Granularity of Access Control

docker-socket-proxy fails to properly gate read endpoints in the /containers Docker API namespace when the CONTAINERS environment variable is set. Attackers can use GET requests to /containers/id/archive, /containers/id/export, /containers/id/logs, and /containers/id/top to read arbitrary files a...

PT-2026-79743

Name of the Vulnerable Software and Affected Versions docker-socket-proxy versions prior to 0.5.1 Description Insufficient access control granularity occurs when the CONTAINERS environment variable is set, failing to properly gate read endpoints within the /containers Docker API namespace. This...

SUSE SLED15: docker / docker-bash-completion / docker-buildx / etc (SUSE-SU-2026:3668-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3668-1 advisory. This update for docker rebuilds it against the current go security release. Tenable has extracted the preceding...

Exploit for CVE-2026-58455

CVE-2026-58455 — Dockwatch Unauthenticated RCE auth bypass +...

EUVD-2026-63905

Headroom's LLM proxy derives the memory owner from the x-headroom-user-id request header. The header is read directly at several points in headroom/proxy/handlers/openai.py, including the chat completion and websocket paths, and nothing binds the value to the caller. A client can therefore name...

Exploit for CVE-2026-41567

CVE-2026-41567 1day One day for Docker Escape CVE-2026-41567...

org.apache.inlong:agent-core (>=2.0.0, <=2.3.0), org.apache.inlong:agent-docker (>=2.0.0, <=2.3.0) +3 more potentially affected by CVE-2026-63046 via org.apache.inlong:agent-common (>=2.0.0, <=2.3.0)

org.apache.inlong:agent-common MAVEN version =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.3.0 Source cves: CVE-2026-63046 Source advisory: MEND:CVE-2026-63046...

org.apache.inlong:agent-docker (>=2.0.0, <=2.3.0), org.apache.inlong:agent-installer (>=2.0.0, <=2.3.0) +2 more potentially affected by CVE-2026-63046 via org.apache.inlong:agent-core (>=2.0.0, <=2.3.0)

org.apache.inlong:agent-core MAVEN version =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.3.0 Source cves: CVE-2026-63046 Source advisory: MEND:CVE-2026-63046...

Security update for docker

This update for docker rebuilds it against the current go security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: SUSE Linux Enterprise...

SUSE-SU-2026:3668-1 Security update for docker

This update for docker rebuilds it against the current go security release...

Exploit for CVE-2026-20896

CVE-2026-20896: Gitea Docker Image Authentication Bypass PoC...

CVE-2026-77776: Authorization Bypass Through User-Controlled Key

Headroom's LLM proxy derives the memory owner from the x-headroom-user-id request header. The header is read directly at several points in headroom/proxy/handlers/openai.py, including the chat completion and websocket paths, and nothing binds the value to the caller. A client can therefore name...

PT-2026-83767

This update for docker rebuilds it against the current go security release...

DockSec v2026.8.19

!CREATEDhttps://img.shields.io/badge/created-feb,%202025-blue?style=for-the-b...

CVE-2026-73040

Dockge validates a stack name only on the write path. In backend/stack.ts the allow-list check in validate, which requires the name to match ^a-z0-9-+$, is reached from save alone, while the path getter returns path.jointhis.server.stacksDir, this.name and Stack.getStack builds...