CopyEscape-CVE-2026-17106

CopyEscape: Übernahme von Docker-Hosts mit docker cp CVE-2026-17106 Dies ist das Proof-of-Concept-Repository zum Blogbeitrag CopyEscape: Übernahme von Docker-Hosts mitdocker cp — CVE-2026-17106. CopyEscape ermöglicht es einem bösartigen laufenden Container, den Archiv-Erzeuger von Docker in einem...

POC-CopyEscape-CVE-2026-17106

CopyEscape — PoC di CVE-2026-17106 Proof of Concept educativa di CopyEscape CVE-2026-17106, vulnerabilità di race condition TOCTOU in docker cp che consente a un container dannoso di scrivere file arbitrari sull'host Docker. Ispirata al lavoro originale di masasron , che ha scoperto e documentato...

GO-2026-4859 vulnerabilities

Vulnerabilities for packages: docker-compose, kubescape, kaniko, podman, trivy, conftest, skaffold, docker-cli-buildx, guac, trivy-operator, zot, osv-scanner, buildah, scorecard...

GO-2026-4858 vulnerabilities

Vulnerabilities for packages: docker-compose, kubescape, kaniko, podman, trivy, conftest, skaffold, docker-cli-buildx, guac, trivy-operator, zot, osv-scanner, buildah, scorecard...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: glab, kbld, kaniko, tetragon, step-issuer, secrets-store-csi-driver, cass-operator, aactl, conjur-cli, jitsucom-bulker, promxy, vcluster, ctop, coredns, crossplane-provider-family-azure, govulncheck, grafana-alloy, metrics-server, terraform-provider-grafana, k9s,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: glab, minio, step-issuer, trivy, aactl, gh, falcoctl, crossplane-provider-family-azure, k9s, fulcio, mattermost, prometheus-operator, trivy-operator, crossplane-provider-aws-lambda, zot, k3s, crossplane-provider-aws-cloudformation, src, crossplane-provider-aws-iam,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: cosign, aactl, gh, docker-cli-buildx, spire-server, falcoctl, ratify, sigstore-scaffolding, gitsign, zot, tkn, goreleaser, kyverno, teleport, vexctl, tflint, crossplane, tekton-chains, neuvector-sigstore-interface, zarf, kubescape, flux-source-controller, ko,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: cosign, trivy, aactl, gh, docker-cli-buildx, spire-server, falcoctl, ratify, sigstore-scaffolding, gitsign, trivy-operator, zot, tkn, goreleaser, kyverno, teleport, vexctl, tflint, crossplane, tekton-chains, slsa-verifier, neuvector-sigstore-interface, zarf, kubescap...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: thanos-operator, kubernetes-csi-driver-hostpath, trivy, aactl, mongo-tools, falcoctl, nri-f5, grafana-alloy, helm-operator, fulcio, cerbos, prometheus-operator, headlamp, k3s, cloud-sql-proxy, zot, src, kube-logging-operator, cni-plugins, cilium-cli, conftest, tempo,...

Exploit for CVE-2026-17106

CopyEscape — PoC de CVE-2026-17106 Proof of Concept educati...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: etcd-fips, cerbos-fips, reports-server, frankenphp-8.3, kubeflow-katib, pinact, rke2-runtime, knative-kafka-broker-fips, pulumi-language-dotnet, ocm-kubernetes-controller-fips, dataplaneapi, cloud-provider-azure-fips, kube-state-metrics, external-secrets-operator-fip...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: glab, k8s-device-plugin, kubeflow-katib, traefik, pulumi-language-dotnet, docker-cli-buildx, kots, pinact, grafana-alloy, nerdctl, opentofu, istio, libnvidia-container, loki, mattermost, rekor, cerbos, undock, prometheus-operator, timestamp-authority, k3s, melange,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: etcd-fips, reports-server, frankenphp-8.3, knative-kafka-broker-fips, tekton-pipelines, kube-state-metrics, external-secrets-operator-fips, external-dns, vault, knative-serving, vitess, commercial-expanso-edge, podman, packer, harbor, elastic-agent-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: glab, minio, step-issuer, trivy, aactl, gh, falcoctl, crossplane-provider-family-azure, k9s, fulcio, mattermost, prometheus-operator, trivy-operator, zot, k3s, gitea, cert-manager, kyverno, pulumi-language-java, flux-kustomize-controller, cilium-cli, knative-serving,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: external-dns, minio, podman, aactl, external-secrets-operator, docker-cli-buildx, spire-server, kots, cilium, nerdctl, istio, loki, mattermost, rancher, prometheus-operator, zot, k3s, snyk-cli, cert-manager, kyverno, cilium-cli, flux, knative-serving, kaf, fscrypt,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: helm-operator, kubescape-server, tekton-pipelines, cluster-api-helm-controller, beats, kaniko, neuvector, newrelic-infrastructure-agent, manifest-tool, docker-compose-fips, trivy, datadog-agent, kube-arangodb, datadog-agent-fips, helm-mapkubeapis, packer, cg,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: helm-operator, kubescape-server, cluster-api-helm-controller, kaniko, neuvector, newrelic-infrastructure-agent, manifest-tool, docker-compose-fips, trivy, datadog-agent, kube-arangodb, datadog-agent-fips, helm-mapkubeapis, packer, consul-k8s, cg, tigera-operator,...

ROOT-APP-GOBINARY-CVE-2025-15558 CVE-2025-15558 in rootio-github.com/docker/cli - Patched by Root

Root has patched CVE-2025-15558 in the rootio-github.com/docker/cli package for Root:Go. Multiple fixed versions available...

CVE-2026-39821 affecting package docker-cli for versions less than 25.0.7-3

CVE-2026-39821 affecting package docker-cli for versions less than 25.0.7-3. A patched version of the package is available...

CVE-2026-6406

The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation ECI restrictions in Docker Desktop. When ECI is enabled, Docker socket mounts from containers are denied unless explicitly allowed via the admin-settings configuration. However, the --use-api-socket flag adds the Docker...