RLSA-2026:97229 Important: skopeo security, bug fix, and enhancement update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fixes: docker: Moby/Docker Engine: Arbitrary Code Execution via malicious container image and compressed archive upload CVE-2026-41567 B...

skopeo security, bug fix, and enhancement update

An update is available for skopeo. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The skopeo command lets you inspect images from container image registries, ge...

RLSA-2026:97562 Important: skopeo security, bug fix, and enhancement update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fixes: net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME CVE-2026-33811 docker: Moby/Docker Engine:...

CVE-2021-41091

CVE-2021-41091 This exploit offers an in-depth look at the CVE-2021-41091 security vulnerability and provides a step-by-step guide on how to utilize the exploit script to achieve privilege escalation on a host. Vulnerability Summary CVE-2021-41091 is a flaw in Moby Docker Engine that allows...

CVE-2026-115538

Moby's overlay network driver does not restore the iptables rules for encrypted overlay networks after firewalld deletes them. Unlike other Docker Engine networking components, the overlay driver does not handle firewalld reload or start signals over D-Bus. The missing rules cause outgoing VXLAN...

CVE-2026-34040-PoC

CVE-2026-34040 — Docker/Moby AuthZ Plugin Bypass Lab PoC EN: A lab reproduction of a vulnerability that bypasses Docker Moby authorization AuthZ plugins using an oversized 1MB request body. Vulnerability facts Item| Value ---|--- CVE| CVE-2026-34040 CVSS 3.1| 8.8 High —...

github.com/moby/go-archive: moby/go-archive: Arbitrary file write via link following in tar extraction

A flaw was found in moby/go-archive. The tar extraction routines in the component do not properly restrict filesystem operations to the intended destination directory. An attacker who controls the contents of an archive can exploit this by including symbolic links, allowing them to create or...

CVE-2021-41091

CVE-2021-41091 A bug in Moby Docker Engine allows unprivileged users to traverse directories and execute programs directly from the container on the host machine. If there is a suid program in the container, the user will be able to execute it as suid on the host machine. PoC In the container's...

RHEL 10 : podman (RHSA-2026:98554)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:98554 advisory. The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use...

docker: Moby/Docker Engine: Arbitrary Code Execution via malicious container image and compressed archive upload

A flaw was found in Moby, the open-source container framework, and Docker Engine. A malicious container image can exploit this vulnerability to achieve arbitrary code execution with full daemon privileges, including host root access. This occurs when a user uploads a compressed archive to the...

CVE-2026-115538

Moby's overlay network driver does not restore the iptables rules for encrypted overlay networks after firewalld deletes them. Unlike other Docker Engine networking components, the overlay driver does not handle firewalld reload or start signals over D-Bus. The missing rules cause outgoing VXLAN...

docker: Moby/Docker Engine: Arbitrary Code Execution via malicious container image and compressed archive upload

A flaw was found in Moby, the open-source container framework, and Docker Engine. A malicious container image can exploit this vulnerability to achieve arbitrary code execution with full daemon privileges, including host root access. This occurs when a user uploads a compressed archive to the...

CVE-2026-115538

Moby's overlay network driver does not restore the iptables rules for encrypted overlay networks after firewalld deletes them. Unlike other Docker Engine networking components, the overlay driver does not handle firewalld reload or start signals over D-Bus. The missing rules cause outgoing VXLAN...

CVE-2026-115538

Moby's overlay network driver does not restore the iptables rules for encrypted overlay networks after firewalld deletes them. Unlike other Docker Engine networking components, the overlay driver does not handle firewalld reload or start signals over D-Bus. The missing rules cause outgoing VXLAN...

RHEL 9 : skopeo (RHSA-2026:97562)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:97562 advisory. The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and...

copyescape-check

copyescape-check Docker copy destination escape CVE-2026-17106 · offline version triage copyescape-check is the dedicated repository for CVE-2026-17106 alias GHSA-hfg8-hc9c-6c3h, a flaw where a crafted archive can make docker cp copy-out and other moby/go-archive extraction write outside the...

AZL-112756 CVE-2026-121520 affecting package moby-engine 25.0.18-2

In BuildKit versions prior to v0.34.1, a malicious client with access to the BuildKit control APIs can submit a build request that sets an extended attribute on a file outside the BuildKit state directory. Extended attributes in the trusted. or security. namespaces may also be set, potentially...

CVE-2026-53495 affecting package moby-containerd-cc for versions less than 1.7.7-19

CVE-2026-53495 affecting package moby-containerd-cc for versions less than 1.7.7-19. A patched version of the package is available...

CVE-2026-81870 affecting package moby-containerd-cc for versions less than 1.7.7-19

CVE-2026-81870 affecting package moby-containerd-cc for versions less than 1.7.7-19. A patched version of the package is available...

CVE-2026-78669 affecting package moby-containerd-cc for versions less than 1.7.7-19

CVE-2026-78669 affecting package moby-containerd-cc for versions less than 1.7.7-19. A patched version of the package is available...