CVE-2026-D0cker

CVE-2026-Pending: Escape de contenedor a través de la vulnerabilidad maskPaths de runC Severidad: Crítica CVSS 9.8 Componente: opencontainers/runc libcontainer Tipo de vulnerabilidad: CWE-59: Resolución incorrecta de enlaces antes del acceso al archivo 'Link Following' 🚨 Resumen ejecutivo Existe...

EUVD-2026-67129

Dool in versions up to 1.3.8 is vulnerable to symlink following when the "--devel" flag is used, as the application opens a log file without the "ONOFOLLOW" flag. A local attacker can exploit this by creating a symlink at the expected log file path pointing to a sensitive file, causing dool to...

AZL-95985 CVE-2026-47766 affecting package crun 1.24-6

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...