POC-CopyEscape-CVE-2026-17106

CopyEscape — CVE-2026-17106 PoC CopyEscapeCVE-2026-17106에 대한 교육용 개념 증명PoC입니다. docker cp의 TOCTOU 레이스 조건 취약점으로, 악성 컨테이너가 Docker 호스트에 임의의 파일을 쓸 수 있게 합니다. 이 취약점을 발견하고 "CopyEscape: Taking Over Docker Hosts with docker cp" 블로그에 문서화한 masasron 의 원래 연구에서 영감을 받았습니다. 목차 1. 요약 2. 법적 고지 3. 공격 체인 구조 4. 요구 사항 5...

CopyEscape-CVE-2026-17106

CopyEscape: Übernahme von Docker-Hosts mit docker cp CVE-2026-17106 Dies ist das Proof-of-Concept-Repository zum Blogbeitrag CopyEscape: Übernahme von Docker-Hosts mitdocker cp — CVE-2026-17106. CopyEscape ermöglicht es einem bösartigen laufenden Container, den Archiv-Erzeuger von Docker in einem...

GO-2026-4859 vulnerabilities

Vulnerabilities for packages: guac, conftest, podman, trivy, skaffold, buildah, scorecard, trivy-operator, zot, kubescape, docker-cli-buildx, kaniko, osv-scanner, docker-compose...

GO-2026-4858 vulnerabilities

Vulnerabilities for packages: guac, conftest, podman, trivy, skaffold, buildah, scorecard, trivy-operator, zot, kubescape, docker-cli-buildx, kaniko, osv-scanner, docker-compose...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: spicedb-operator, gostatsd, newrelic-infra-operator, nova, stakater-reloader, docker-machine-driver-linode, migrate, cluster-api-ipam-provider-in-cluster, paranoia, db-operator, crossplane-provider-aws-kinesis, manifest-tool, litestream, kubernetes-event-exporter,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-eks, docker-machine-driver-linode, crossplane-provider-aws-kinesis, scorecard, zot, flux-notification-controller, falcoctl, cloudflared, nfpm, step, sops, minio, chisel, kyverno, crossplane-provider-aws-cloudwatchlogs,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: spire-server, sigstore-scaffolding, zot, witness, aactl, falcoctl, flux-source-controller, tekton-chains, skaffold, kubescape, kyverno, gh, tkn, policy-controller, cosign, teleport, docker-cli-buildx, gitsign, crossplane, kyverno-notation-aws, ko,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: spire-server, sigstore-scaffolding, zot, witness, aactl, falcoctl, flux-source-controller, tekton-chains, skaffold, kubescape, kyverno, gh, tkn, policy-controller, cosign, docker, buildkitd, teleport, docker-cli-buildx, gitsign, crossplane, trivy, kyverno-notation-aw...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: nova, migrate, docker-credential-gcr, zot, bom, falcoctl, wgcf, cloud-sql-proxy, kor, grafana-alloy, rancher-system-upgrade-controller, delve, terraform-mcp-server, emissary, nuclei, spire-controller-manager, nri-memcached, steampipe, trivy, gobump,...

Exploit for CVE-2026-17106

CopyEscape — PoC de CVE-2026-17106 Proof of Concept educati...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: cluster-api, nerdctl, terraform-fips, knative-serving-fips, zarf-fips, ocm-kubernetes-controller-fips, grype-fips, loki, mattermost-fips, dask-gateway, kube-arangodb-fips, frankenphp-8.3, mattermost, azure-aad-pod-identity-mic, ocm-cli, cilium-envoy-fips,...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: kots, grype, cilium-cli, karpenter, scorecard, opentofu, libnvidia-container, kubernetes-csi-node-driver-registrar, dataplaneapi, kubernetes-dashboard, prometheus-operator, snyk-cli, pulumi-language-dotnet, undock, grafana-alloy, pinact, kyverno, src, cerbos,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: nerdctl, terraform-fips, knative-serving-fips, loki, mattermost-fips, minio, kube-arangodb-fips, mattermost, frankenphp-8.3, reports-server, frankenphp-8.2, kubernetes-fips, docker-cli-buildx-fips, omnictl-multiarch-fips, tekton-pipelines, argo-cd-fips, gatekeeper,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: scorecard, zot, flux-notification-controller, falcoctl, nfpm, step, sops, minio, chisel, kyverno, terraform-provider-azurerm, gitea, terragrunt, rancher-machine, nuclei, gatus, osv-scanner, loki, steampipe, trivy, go-discover, ko, helm, neuvector-sigstore-interface,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: kots, spire-server, fscrypt, cilium-cli, external-secrets-operator, zot, kubernetes-dashboard, kaf, aactl, podman, rancher, prometheus-operator, snyk-cli, cloud-provider-aws, minio, kyverno, prometheus, flux, istio, mattermost, external-dns, buildah, k3s,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: k9s, envoy-gateway, teleport, zarf-fips, grype-fips, kube-arangodb-fips, skaffold, kgateway, docker-cli-buildx-fips, tekton-pipelines, scorecard, helmfile, crossplane-fips, gatekeeper, manifest-tool, helm-set-status, google-osconfig-agent, kube-arangodb, rancher, hel...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: k9s, envoy-gateway, teleport, zarf-fips, grype-fips, kube-arangodb-fips, skaffold, kgateway, docker-cli-buildx-fips, scorecard, helmfile, crossplane-fips, gatekeeper, manifest-tool, helm-set-status, google-osconfig-agent, kube-arangodb, rancher, helm, helm-operator,...

ROOT-APP-GOBINARY-CVE-2025-15558 CVE-2025-15558 in rootio-github.com/docker/cli - Patched by Root

Root has patched CVE-2025-15558 in the rootio-github.com/docker/cli package for Root:Go. Multiple fixed versions available...

CVE-2026-39821 affecting package docker-cli for versions less than 25.0.7-3

CVE-2026-39821 affecting package docker-cli for versions less than 25.0.7-3. A patched version of the package is available...

CVE-2026-6406

The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation ECI restrictions in Docker Desktop. When ECI is enabled, Docker socket mounts from containers are denied unless explicitly allowed via the admin-settings configuration. However, the --use-api-socket flag adds the Docker...