https://vulnerability.circl.lu/sightings/feed 2026-10-09T03:00:14.848011+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/b54254e6-e38c-4374-a0e9-6db0bc04c72a/export 2026-10-09T03:00:14.878909+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b54254e6-e38c-4374-a0e9-6db0bc04c72a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79994", "type": "seen", "source": "https://t.me/omniscient_team/120", "content": "Docker CVE \u2014 sentabr 2026\n\n\n\ud83d\udd34 CVE-2026-77179 Critical\nSandbox \u2192 host fayl R/W (macOS)\n\n\ud83d\udfe0 CVE-2026-79994 / 55887 / 17106 / 34040 High\nSocket, privileged run, docker cp, AuthZ\n\n\ud83d\udfe1 CVE-2026-53493 Moderate\ncontainerd image-pull DoS\n\nYangilang:\nDesktop 4.88.0+ \u2022 Sandboxes 0.42.0+ \u2022 Engine latest", "creation_timestamp": "2026-09-28T07:52:58.000000Z"} 2026-09-28T07:52:58+00:00 https://vulnerability.circl.lu/sighting/9c9016e1-9d83-46ea-ba02-39559a6cdf3f/export 2026-10-09T03:00:14.880640+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "9c9016e1-9d83-46ea-ba02-39559a6cdf3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79994", "type": "seen", "source": "https://bsky.app/profile/chrisshort.net/post/3mw2nt36arq2c", "content": "Docker Sandboxes 0.42.0 security update: CVE-2026-77179 and CVE-2026-79994 #devopsish", "creation_timestamp": "2026-09-21T21:29:32.560637Z"} 2026-09-21T21:29:32.560637+00:00 https://vulnerability.circl.lu/sighting/dc4eb0ba-a973-4365-91f8-82364421e16b/export 2026-10-09T03:00:14.880784+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "dc4eb0ba-a973-4365-91f8-82364421e16b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-79994", "type": "seen", "source": "https://hachyderm.io/users/ChrisShort/statuses/117311155098242180", "content": "Docker Sandboxes 0.42.0 security update: CVE-2026-77179 and CVE-2026-79994 #devopsish https://docs.docker.com/security/security-announcements/#docker-sandboxes-0420-security-update-cve-2026-77179-and-cve-2026-79994", "creation_timestamp": "2026-09-21T21:29:32.259796Z"} 2026-09-21T21:29:32.259796+00:00 https://vulnerability.circl.lu/sighting/2477972d-084d-4096-b725-b02cbad93dc1/export 2026-10-09T03:00:14.880903+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "2477972d-084d-4096-b725-b02cbad93dc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79994", "type": "seen", "source": "https://t.me/pphm_HackerNews/3196", "content": "\ud83d\udd34 Docker Sandboxes Vulnerabilities Let Malicious Guests Escape Workspace and Access Host Files\n\nDocker has released security fixes for two serious vulnerabilities in Docker Sandboxes that could let a malicious guest environment bypass workspace isolation and access sensitive resources on the host.\n\nThese flaws, identified as CVE-2026-77179 and CVE-2026-79994, were addressed in Docker Sandboxes version 0.42.0, which was released on September 7.\n\nDocker Sandboxes isolate development agents and workloads while selectively sharing a host workspace. Both vulnerabilities arise from improper handling of pathnames after an authorization decision: a compromised sandbox could exploit symbolic links to alter a directory path between the validation and subsequent host-side access.", "creation_timestamp": "2026-09-20T10:00:04.934310Z"} 2026-09-20T10:00:04.934310+00:00 https://vulnerability.circl.lu/sighting/19ba5cb4-fc7e-47cf-a478-e7c55d67d724/export 2026-10-09T03:00:14.881090+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "19ba5cb4-fc7e-47cf-a478-e7c55d67d724", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-79994", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mvrl2su3lk2o", "content": "Critical Docker Sandboxes Flaws Let AI Agents Escape MicroVMs to Hijack Hosts (CVE-2026-77179 &\u00a0CVE-2026-79994)\n\nCritical Docker Sandboxes flaws CVE-2026-77179 and CVE-2026-79994 can let malicious AI agents escape\u2026\n\nhttps://thecybersecguru.com/news/docker-sandboxes-cve-2026-77179-cve-2026-79994/", "creation_timestamp": "2026-09-18T06:46:13.639040Z"} 2026-09-18T06:46:13.639040+00:00 https://vulnerability.circl.lu/sighting/8718c955-c717-4d7b-a899-deefecfe4f3c/export 2026-10-09T03:00:14.881196+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "8718c955-c717-4d7b-a899-deefecfe4f3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79994", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mvrcer5hay2e", "content": "Docker Sandboxes 0.42.0 security update: CVE-2026-77179 and CVE-2026-79994 #patchmanagement", "creation_timestamp": "2026-09-18T04:10:43.177749Z"} 2026-09-18T04:10:43.177749+00:00 https://vulnerability.circl.lu/sighting/721c7c40-3033-40f1-9003-02401fc1ad36/export 2026-10-09T03:00:14.881294+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "721c7c40-3033-40f1-9003-02401fc1ad36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79994", "type": "seen", "source": "https://bsky.app/profile/kcqon.bsky.social/post/3mvqggghca222", "content": "Containers don't contain, but VMs don't contain either \ud83d\ude42 Latest example, Docker Sandboxes where a vulnerability in virtio-fs host server allows a host breakout / code execution (CVE-2026-77179). There's also CVE-2026-79994, another symlink related bug (with Unix domain sockets).", "creation_timestamp": "2026-09-17T19:50:31.578696Z"} 2026-09-17T19:50:31.578696+00:00 https://vulnerability.circl.lu/sighting/644967c3-4f6d-4498-ba4a-42b3ce9f9637/export 2026-10-09T03:00:14.881391+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "644967c3-4f6d-4498-ba4a-42b3ce9f9637", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79994", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mvomhofmxe2o", "content": "Docker released an update for critical Docker Sandboxes vulnerabilities (CVE-2026-77179, CVE-2026-79994). Patch these Docker Sandboxes vulnerabilities today.\n\n#Docker #DockerSandboxes #CVE202677179 #CVE202679994 #Cybersecurity", "creation_timestamp": "2026-09-17T02:33:19.896363Z"} 2026-09-17T02:33:19.896363+00:00 https://vulnerability.circl.lu/sighting/75b38bc0-9f00-4092-8a57-d181ba185b17/export 2026-10-09T03:00:14.881489+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "75b38bc0-9f00-4092-8a57-d181ba185b17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79994", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mvn3onh6id2r", "content": "\ud83d\udd17 CVE : CVE-2026-77179, CVE-2026-79994", "creation_timestamp": "2026-09-16T12:00:19.390189Z"} 2026-09-16T12:00:19.390189+00:00