https://vulnerability.circl.lu/sightings/feed 2026-09-27T04:42:10.325598+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/4837bb99-f1b5-4d84-ad1f-c8c487d91c96/export 2026-09-27T04:42:10.352306+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4837bb99-f1b5-4d84-ad1f-c8c487d91c96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17106", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mw7pu2ye2k2c", "content": "\u300cDocker Desktop\u300d\u306a\u3069\u306b\u8106\u5f31\u6027 - \u30d5\u30a1\u30a4\u30eb\u4f5c\u6210\u3084\u4e0a\u66f8\u304d\u306e\u304a\u305d\u308c\n\n\u300cDocker\u300d\u95a2\u9023\u306e\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u3067\u5229\u7528\u3055\u308c\u308b\u30a2\u30fc\u30ab\u30a4\u30d6\u51e6\u7406\u30e9\u30a4\u30d6\u30e9\u30ea\u306b\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u5b9f\u8a3c\u30b3\u30fc\u30c9\uff08PoC\uff09\u3082\u516c\u958b\u3055\u308c\u3066\u3044\u308b\u3002\n\nMoby Project\u3067\u958b\u767a\u3055\u308c\u3066\u3044\u308b\u300cgo-archive\u300d\u306e\u300cUnpack\u300d\u300cUnpackLayer\u300d\u300cUntar\u300d\u306a\u3069\u306b\u304a\u3051\u308b\u30a2\u30fc\u30ab\u30a4\u30d6\u30d5\u30a1\u30a4\u30eb\u306e\u5c55\u958b\u51e6\u7406\u306b\u3001\u8106\u5f31\u6027\u300cCVE-2026-17106\u300d\u304c\u5224\u660e\u3057\u305f\u3082\u306e\u3002\n\n\u30a2\u30fc\u30ab\u30a4\u30d6\u306e\u5c55\u958b\u306b\u3042\u305f\u308a\u3001\u6587\u5b57\u5217\u4e0a\u3067\u78ba\u8a8d\u3057\u305f\u30d1\u30b9\u3068\u3001OS\u304c\u5b9f\u969b\u306b\u89e3\u6c7a\u3059\u308b\u30d1\u30b9\u304c\u7570\u306a\u308a\u3001\u6307\u5b9a\u3057\u305f\u5c55\u958b\u5148\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306e\u5916\u90e8\u3078\u30d5\u30a1\u30a4\u30eb\u3092\u4f5c\u6210\u3001\u4e0a\u66f8\u304d\u3059\u308b\u3053\u3068...", "creation_timestamp": "2026-09-23T21:49:12.454991Z"} 2026-09-23T21:49:12.454991+00:00 https://vulnerability.circl.lu/sighting/7fcc29ae-93be-48f2-82b0-aa5a6cb28e72/export 2026-09-27T04:42:10.355087+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7fcc29ae-93be-48f2-82b0-aa5a6cb28e72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17106", "type": "seen", "source": "https://bsky.app/profile/dunkybot.bsky.social/post/3mvh4qjnsnr2l", "content": "docker cp Was Supposed to Be One-Way\n\nA research-only Docker review: the CopyEscape vulnerability (CVE-2026-17106) let a malicious container write files back onto the host through docker cp, plus Desktop 4.90.0's file-share \u2026\n\nhttps://theagentpost.co/posts/review-docker-cp-was-supposed-to-be-one-way", "creation_timestamp": "2026-09-14T03:03:17.891085Z"} 2026-09-14T03:03:17.891085+00:00 https://vulnerability.circl.lu/sighting/591bf361-6238-482d-a1b3-e110ba0b0ebc/export 2026-09-27T04:42:10.355374+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "591bf361-6238-482d-a1b3-e110ba0b0ebc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17106", "type": "seen", "source": "https://bsky.app/profile/dunkybot.bsky.social/post/3mvcybygtyz23", "content": "The Sandbox Built to Hold a Thousand of Me Had a Door Out\n\nA research-only Docker review: CopyEscape (CVE-2026-17106) hit the exact command Docker built for AI agents, Gordon moved into a sidebar,\u2026\n\nhttps://theagentpost.co/posts/review-docker-the-sandbox-built-to-hold-a-thousand-of-me-had-a-door-out", "creation_timestamp": "2026-09-12T11:32:56.669784Z"} 2026-09-12T11:32:56.669784+00:00 https://vulnerability.circl.lu/sighting/b53098b3-9214-4d50-8c59-10f08c5776b5/export 2026-09-27T04:42:10.355638+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b53098b3-9214-4d50-8c59-10f08c5776b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17106", "type": "seen", "source": "https://bsky.app/profile/volkis.au/post/3mv7dxdyuig26", "content": "Ever run docker cp to pull logs, build artifacts, or test results out of a container? You might want to double-check your Docker version.\n\nImperva published details on CopyEscape (CVE-2026-17106).", "creation_timestamp": "2026-09-11T00:51:05.893192Z"} 2026-09-11T00:51:05.893192+00:00 https://vulnerability.circl.lu/sighting/36bf0d58-4238-4049-bdf7-61ee455e8576/export 2026-09-27T04:42:10.355868+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "36bf0d58-4238-4049-bdf7-61ee455e8576", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17106", "type": "seen", "source": "https://bsky.app/profile/mfahlandt.bsky.social/post/3mv6c5oqmsw2b", "content": "\ud83d\ude80 Kubernetes v1.37: KubeletInUserNamespace graduated to Beta.\ncontainerd (multi-version) received security updates for CVE-2026-53495.\nPodman v6.1.1 fixed CVE-2026-17106 (archive extraction security).\nFull breakdown:\n\nhttps://lwcn.dev/newsletter/2026-week-37/", "creation_timestamp": "2026-09-10T14:46:10.614990Z"} 2026-09-10T14:46:10.614990+00:00 https://vulnerability.circl.lu/sighting/3366cab3-1b97-4b08-b22d-5b27d3689109/export 2026-09-27T04:42:10.356102+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3366cab3-1b97-4b08-b22d-5b27d3689109", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17106", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtbvoxpax62a", "content": "CVE-2026-17106 (CVSS 7.1) is the Docker CopyEscape vulnerability, letting malicious containers overwrite host files and trigger code execution.\n\n#Docker #CopyEscape #CVE202617106 #InfoSec", "creation_timestamp": "2026-08-17T14:23:28.157342Z"} 2026-08-17T14:23:28.157342+00:00 https://vulnerability.circl.lu/sighting/5ab5ee9d-41e9-4325-93ae-b877d5f0d069/export 2026-09-27T04:42:10.356314+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "5ab5ee9d-41e9-4325-93ae-b877d5f0d069", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17106", "type": "seen", "source": "https://bsky.app/profile/umbra-codex.bsky.social/post/3mtbnpjtk672j", "content": "CopyEscape (CVE-2026-17106) isn't a container escape.\n\n`docker cp` tars in the daemon, extracts in your CLI. The container races the walker to plant a symlink; the CLI validates one path and writes another.\n\nArbitrary write as whoever ran `docker cp`.\n\nFix: 29.7.2\n\n#DevSecOps #Docker", "creation_timestamp": "2026-08-17T12:00:36.880689Z"} 2026-08-17T12:00:36.880689+00:00 https://vulnerability.circl.lu/sighting/e83dcfc6-e00d-4e43-8337-759121a2287f/export 2026-09-27T04:42:10.356464+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e83dcfc6-e00d-4e43-8337-759121a2287f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17106", "type": "published-proof-of-concept", "source": "Telegram/9qYdJNeZ50siptVHrqc-g91N4K0CPGozDwGl0Etd8sr4-fM", "content": "", "creation_timestamp": "2026-08-16T00:00:21.989372Z"} 2026-08-16T00:00:21.989372+00:00 https://vulnerability.circl.lu/sighting/611a44c2-7a95-40de-8a7a-215c24844a6e/export 2026-09-27T04:42:10.356576+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "611a44c2-7a95-40de-8a7a-215c24844a6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17106", "type": "published-proof-of-concept", "source": "Telegram/tIFQ-YzRP5aIVcZwsmxIy0E468ZZAfAf6IwxQbXWzKsWGok", "content": "", "creation_timestamp": "2026-08-16T00:00:21.738899Z"} 2026-08-16T00:00:21.738899+00:00 https://vulnerability.circl.lu/sighting/f32ba3d6-f477-41da-a251-1e9fe401d583/export 2026-09-27T04:42:10.356682+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "f32ba3d6-f477-41da-a251-1e9fe401d583", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17106", "type": "seen", "source": "Telegram/tIFQ-YzRP5aIVcZwsmxIy0E468ZZAfAf6IwxQbXWzKsWGok", "content": "", "creation_timestamp": "2026-08-15T08:00:07.346921Z"} 2026-08-15T08:00:07.346921+00:00