https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T01:37:42.707554+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-65909 EUVD-2026-65909 2026-10-10T01:37:42.711696+00:00 EUVD-2026-65909 https://cve.radiocsirt.org/vuln/fkie_cve-2018-12608 fkie_cve-2018-12608 2026-10-10T01:37:42.711730+00:00

An issue was discovered in Docker Moby before 17.06.0. The Docker engine validated a client TLS certificate using both the configured client CA root certificate and all system roots on non-Windows systems. This allowed a client with any domain validated certificate signed by a system-trusted root CA (as opposed to one signed by the configured CA root certificate) to authenticate.

 https://cve.radiocsirt.org/vuln/ghsa-qrqr-3x5j-2xw9 GHSA-qrqr-3x5j-2xw9 — Docker Authentication Bypass 2026-10-10T01:37:42.711762+00:00

Affected: Go: github.com/docker/docker

An issue was discovered in Docker Moby before 17.06.0. The Docker engine validated a client TLS certificate using both the configured client CA root certificate and all system roots on non-Windows systems. This allowed a client with any domain validated certificate signed by a system-trusted root CA (as opposed to one signed by the configured CA root certificate) to authenticate.

 https://cve.radiocsirt.org/vuln/gsd-2018-12608 gsd-2018-12608 2026-10-10T01:37:42.711788+00:00 gsd-2018-12608 https://cve.radiocsirt.org/vuln/rhsa-2024:5094 RHSA-2024:5094 — Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.6.0 security update 2026-10-10T01:37:42.711800+00:00

moby: cert signing bypass quic-go: memory exhaustion attack against QUIC's connection ID mechanism golang: archive/zip: Incorrect handling of certain ZIP files jose: resource exhaustion

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-12608 UBUNTU-CVE-2018-12608 2026-10-10T01:37:42.711820+00:00

Affected: Ubuntu:16.04:LTS: docker.io, Ubuntu:18.04:LTS: docker.io

An issue was discovered in Docker Moby before 17.06.0. The Docker engine validated a client TLS certificate using both the configured client CA root certificate and all system roots on non-Windows systems. This allowed a client with any domain validated certificate signed by a system-trusted root CA (as opposed to one signed by the configured CA root certificate) to authenticate.