https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T04:18:13.006033+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-1189 certfr-2026-avi-1189 — De multiples vulnérabilités ont été découvertes dans Docker. Certaines d'entre elles permettent à un attaquant de provo… 2026-10-04T04:18:13.077476+00:00 certfr-2026-avi-1189 https://cve.radiocsirt.org/vuln/euvd-2026-369848 EUVD-2026-369848 2026-10-04T04:18:13.077519+00:00 EUVD-2026-369848 https://cve.radiocsirt.org/vuln/fkie_cve-2026-79994 fkie_cve-2026-79994 2026-10-04T04:18:13.077534+00:00

The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname. A malicious guest can replace an intermediate directory with a symlink between validation and connection, causing the host to connect to an arbitrary AF_UNIX socket outside the shared workspace. This can expose data or host-side capabilities provided by the targeted socket.

 https://cve.radiocsirt.org/vuln/ghsa-wq46-97v9-q386 GHSA-wq46-97v9-q386 2026-10-04T04:18:13.077566+00:00

The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname. A malicious guest can replace an intermediate directory with a symlink between validation and connection, causing the host to connect to an arbitrary AF_UNIX socket outside the shared workspace. This can expose data or host-side capabilities provided by the targeted socket.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-79994 UBUNTU-CVE-2026-79994 2026-10-04T04:18:13.077583+00:00

Affected: Ubuntu:Pro:16.04:LTS: docker.io, Ubuntu:Pro:18.04:LTS: docker.io, Ubuntu:Pro:20.04:LTS: docker.io, Ubuntu:Pro:20.04:LTS: docker.io-app, Ubuntu:Pro:22.04:LTS: docker.io, Ubuntu:Pro:22.04:LTS: docker.io-app, Ubuntu:Pro:24.04:LTS: docker.io, Ubuntu:Pro:24.04:LTS: docker.io-app, Ubuntu:26.04:LTS: docker.io, Ubuntu:26.04:LTS: docker.io-app

The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname. A malicious guest can replace an intermediate directory with a symlink between validation and connection, causing the host to connect to an arbitrary AF_UNIX socket outside the shared workspace. This can expose data or host-side capabilities provided by the targeted socket.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3480 WID-SEC-W-2026-3480 — Docker Sandboxes: Mehrere Schwachstellen 2026-10-04T04:18:13.077620+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in Docker Sandboxes ausnutzen, um beliebigen Programmcode auszuführen und um Sicherheitsmaßnahmen zu umgehen.