CVE-2026-71289

The CVE affects NASA-AMMOS ANMS and JHUAPL-DTNMA/dtnma-tools. The default docker-compose setup exposes the amp-manager REST API on the host network (port 8089) with NET_ADMIN/NET_RAW/SYS_NICE and bypasses the CAM gateway, placing the REST server (CivetWeb, nm_rest.c) in a state where enable_auth_...

EUVD-2026-53374

The NASA-AMMOS Asynchronous Network Management System ANMS reference implementation's default docker-compose.yml publishes the amp-manager service's REST API directly to the host network interface port 8089, e.g. "$IONMGRPORT:-8089:8089/tcp" with capadd: NETADMIN, NETRAW, SYSNICE, bypassing the C...

Malicious code in simple-date-formatter-util-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdd747d615be16a4af8508b6151d829c49f8ba2e1d045b8c1cbc9d8f2f219de9 package.json declares a postinstall script that, on npm install, collects installer reconnaissance id, hostname, uname, cgroups, docker.sock, Linux...

MAL-2026-12200 Malicious code in simple-date-formatter-util-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53f8a19e2cff3bcaf070316f16650d8c1af6714f4c44db56971299ef01c16a25 Package advertises itself as a trivial date-formatting utility index.js exports a one-line formatDate wrapper but ships a package.json postinstall ho...

MAL-2026-12090 Malicious code in @wethenorth12/docker-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae39aac54233ee3235e2cb94f52d5d4e182a6f16d91ac42b9d7add9bd8c00470 Package advertises itself as a 'drop-in replacement for dockerode' but the main module index.js has no Docker functionality. On require, it collects...

NetAlertX v26.8.5

NetAlertX - Network Visibility & Asset Intelligence Framework 📷 Click for more screenshots | | ---|---|--- !presencehttps://assets.kitploit.com/production/public/readmes/295/d2773fcfbdc9d1a31a6e178016e1333b685afe85257bb3...

Malicious Package

Overview @zzzgenesis00/docker-api-client is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...

MAL-2026-12055 Malicious code in @zzzgenesis00/docker-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2417f0620e130c16865914c5f79fdff63bdda0daf3257955c8fd536ab894c1b1 postinstall.js runs automatically on npm install and enumerates installer-side secret stores including /.ssh, /.npmrc, /.gitconfig, Chrome and Firefo...

PT-2026-68226

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3 Description An authenticated attacker can read, modify, or expose sensitive host files through Docker-based MCP servers. This occurs because of incomplete filtering of dangerous Docker volume-moun...

CVE-2026-66297: Improper Neutralization of Special Elements used in an OS Command

Improper Neutralization of Special Elements used in an OS Command OS Command Injection vulnerability in livebook-dev livebook allows command injection into generated deployment setup commands. LivebookWeb.Hub.Teams.DeploymentGroupAgentComponent.dockerinstructions/2 and...

CVE-2026-17626: Incorrect Privilege Assignment

IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow an authenticated attacker to read, modify, or expose sensitive host files via Docker-based MCP servers due to incomplete filtering of dangerous Docker volume-mount and device-mapping arguments...

CVE-2026-71289: Missing Authentication for Critical Function

The NASA-AMMOS Asynchronous Network Management System ANMS reference implementation's default docker-compose.yml publishes the amp-manager service's REST API directly to the host network interface port 8089, e.g. ":8089/tcp" with capadd: NETADMIN, NETRAW, SYSNICE, bypassing the CAM Configuration...

Photon OS 5.0: Docker PHSA-2023-5.0-91-0038

An update of the docker package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0038. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Docker PHSA-2025-5.0-91-0667

An update of the docker package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0667. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Docker PHSA-2026-5.0-91-0809

An update of the docker package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0809. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Docker PHSA-2024-5.0-91-0397

An update of the docker package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0397. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

GHSA-7MPP-R37J-X5WH Ghost: Session Fixation in Ghost Admin

Impact Ghost Admin did not invalidate existing sessions on login which could have allowed for session fixation attacks. Successful exploitation would have required another vulnerability on the same domain where Ghost Admin was hosted. Vulnerable versions This vulnerability is present in Ghost fro...

Ghost: Theme Upload Path Traversal

Impact A vulnerability in custom themes allowed a staff user to write files outside of the uploads directory. This could be used to alter the behavior of the installation. Vulnerable versions This vulnerability is present in Ghost from v0.10.0 up to v6.54.0. Patches v6.54.1 contains a fix for thi...

GHSA-JM22-3W23-5Q7W Ghost: Blind Password Hash Disclosure in Ghost Admin API

Impact Any staff-level user was able to leak the hashed passwords of other staff users. An offline password-guessing attack against the hashes could lead to account takeover if successful, but Device Verification should have prevented an attacker from logging in with a recovered password. Dependi...

CVE-2026-69259 Flowise RCE via SQLite Record Manager Node

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the SQLite Record Manager node in packages/components/nodes/recordmanager/SQLiteRecordManager/SQLiteRecordManager.ts accepted user-controlled additionalConfig and spread it after the intended...