Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another

A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed the flaw on September 30 and says it found no evidence that anyone exploited it. The flaw was in the feature that converts a personal...

CVE-2026-105445

An Incorrect Privilege Assignment vulnerability in Docker Hub 's account-to-organization conversion feature allows an authenticated attacker to reassign a personal access token (PAT) they control to another user. Because the token secret remains unchanged during this reassignment, the attacker ca...

CVE-2026-105445 Docker Hub account conversion could reassign an active personal access token to another user

An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a personal access token PAT they controlled to another Docker Hub user without rotating or revoking the token secret. The unchanged PAT then...

CVE-2026-105445 Docker Hub account conversion could reassign an active personal access token to another user

An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a personal access token PAT they controlled to another Docker Hub user without rotating or revoking the token secret. The unchanged PAT then...

EUVD-2026-98965

An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a personal access token PAT they controlled to another Docker Hub user without rotating or revoking the token secret. The unchanged PAT then...

CVE-2026-85733

FrankenPHP is a modern application server for PHP. Prior to 1.12.5, the official FrankenPHP Debian and Alpine Docker images include a default /app/public/index.php that executes phpinfo. A derived image that does not overwrite this placeholder serves the diagnostics page in production and can...

EUVD-2026-98915

FrankenPHP is a modern application server for PHP. Prior to 1.12.5, the official FrankenPHP Debian and Alpine Docker images include a default /app/public/index.php that executes phpinfo. A derived image that does not overwrite this placeholder serves the diagnostics page in production and can...

CVE-2026-85733 FrankenPHP: Docker images serve phpinfo() as the default index.php, leaking environment variables

FrankenPHP is a modern application server for PHP. Prior to 1.12.5, the official FrankenPHP Debian and Alpine Docker images include a default /app/public/index.php that executes phpinfo. A derived image that does not overwrite this placeholder serves the diagnostics page in production and can...

CVE-2026-85733

FrankenPHP is a modern application server for PHP. Prior to 1.12.5, the official FrankenPHP Debian and Alpine Docker images include a default /app/public/index.php that executes phpinfo. A derived image that does not overwrite this placeholder serves the diagnostics page in production and can...

CVE-2026-85733 FrankenPHP: Docker images serve phpinfo() as the default index.php, leaking environment variables

FrankenPHP is a modern application server for PHP. Prior to 1.12.5, the official FrankenPHP Debian and Alpine Docker images include a default /app/public/index.php that executes phpinfo. A derived image that does not overwrite this placeholder serves the diagnostics page in production and can...

CVE-2026-85733 FrankenPHP: Docker images serve phpinfo() as the default index.php, leaking environment variables

FrankenPHP is a modern application server for PHP. Prior to 1.12.5, the official FrankenPHP Debian and Alpine Docker images include a default /app/public/index.php that executes phpinfo. A derived image that does not overwrite this placeholder serves the diagnostics page in production and can...

CVE-2026-85733

Official FrankenPHP Debian and Alpine Docker images prior to version 1.12.5 contain a default /app/public/index.php file that executes phpinfo(). If a derived image does not overwrite this placeholder, it can be accessed in production, leading to the exposure of sensitive information such as envi...

SUSE-SU-2026:24318-1 Security update for docker

This update for docker fixes the following issues: Security issues fixed: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1265782. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allow...

KGU_WebSec_DemoExploit

KGU LMS — Web Security Lab OS Command Injection → Root We...

PT-2026-111733

Name of the Vulnerable Software and Affected Versions FrankenPHP versions prior to 1.12.5 Description Official Debian and Alpine Docker images include a default /app/public/index.php file that executes the phpinfo function. If a derived image does not overwrite this placeholder, it serves a...

PT-2026-111670

Name of the Vulnerable Software and Affected Versions Docker Hub affected versions not specified Description An authentication bypass flaw in the management of Personal Access Tokens PAT allowed attackers to impersonate users and organizations. An attacker could create a personal account, generat...

go-archive Interface Arbitrary File Write

The vulnerability in the go-archive interface library of the Docker daemon for Docker Desktop and Docker Compose, a tool for managing multi-container applications, is related to improper definition of symbolic links prior to file access. Exploitation of this vulnerability may allow an attacker to...

CVE-2026-105445: Incorrect Privilege Assignment

An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a personal access token PAT they controlled to another Docker Hub user without rotating or revoking the token secret. The unchanged PAT then...

CVE-2026-85733: Exposure of Sensitive Information to an Unauthorized Actor

FrankenPHP is a modern application server for PHP. Prior to 1.12.5, the official FrankenPHP Debian and Alpine Docker images include a default /app/public/index.php that executes phpinfo. A derived image that does not overwrite this placeholder serves the diagnostics page in production and can...

CVE-2026-109239

Crawl4AI before 0.9.4 contains a blind server-side request forgery vulnerability in RobotsParser.canfetch that lets unauthenticated attackers bypass Docker server egress controls. Attackers can enable checkrobotstxt and use redirects or DNS rebinding to reach internal, loopback, or cloud-metadata...