https://vulnerability.circl.lu/sightings/feed 2026-10-07T17:46:16.490789+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/91944885-c61c-4c20-8965-1262ad53dbd0/export 2026-10-07T17:46:16.519258+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "91944885-c61c-4c20-8965-1262ad53dbd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77179", "type": "seen", "source": "https://t.me/omniscient_team/120", "content": "Docker CVE \u2014 sentabr 2026\n\n\n\ud83d\udd34 CVE-2026-77179 Critical\nSandbox \u2192 host fayl R/W (macOS)\n\n\ud83d\udfe0 CVE-2026-79994 / 55887 / 17106 / 34040 High\nSocket, privileged run, docker cp, AuthZ\n\n\ud83d\udfe1 CVE-2026-53493 Moderate\ncontainerd image-pull DoS\n\nYangilang:\nDesktop 4.88.0+ \u2022 Sandboxes 0.42.0+ \u2022 Engine latest", "creation_timestamp": "2026-09-28T07:52:58.000000Z"} 2026-09-28T07:52:58+00:00 https://vulnerability.circl.lu/sighting/022f0f68-25b2-41f0-bb8c-634ceb44af69/export 2026-10-07T17:46:16.521695+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "022f0f68-25b2-41f0-bb8c-634ceb44af69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77179", "type": "seen", "source": "https://bsky.app/profile/chrisshort.net/post/3mw2nt36arq2c", "content": "Docker Sandboxes 0.42.0 security update: CVE-2026-77179 and CVE-2026-79994 #devopsish", "creation_timestamp": "2026-09-21T21:29:32.509365Z"} 2026-09-21T21:29:32.509365+00:00 https://vulnerability.circl.lu/sighting/d94ff4e1-e604-46b0-b821-f9b11520cd1d/export 2026-10-07T17:46:16.521841+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d94ff4e1-e604-46b0-b821-f9b11520cd1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77179", "type": "seen", "source": "https://hachyderm.io/users/ChrisShort/statuses/117311155098242180", "content": "Docker Sandboxes 0.42.0 security update: CVE-2026-77179 and CVE-2026-79994 #devopsish https://docs.docker.com/security/security-announcements/#docker-sandboxes-0420-security-update-cve-2026-77179-and-cve-2026-79994", "creation_timestamp": "2026-09-21T21:29:32.200357Z"} 2026-09-21T21:29:32.200357+00:00 https://vulnerability.circl.lu/sighting/0604c7b6-8d82-424a-a244-d5b970a151a5/export 2026-10-07T17:46:16.521955+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0604c7b6-8d82-424a-a244-d5b970a151a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77179", "type": "seen", "source": "https://t.me/CyberDispatch/3005", "content": "Critical Docker Sandboxes flaw lets malicious guest code escape the shared workspace and read or modify files across a macOS host.\n\nCVE-2026-77179 crosses the virtio-fs boundary with the host account\u2019s rights.", "creation_timestamp": "2026-09-21T13:00:04.717004Z"} 2026-09-21T13:00:04.717004+00:00 https://vulnerability.circl.lu/sighting/9fa1d8a7-806a-4c43-8c57-e2a7799f6d68/export 2026-10-07T17:46:16.522057+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "9fa1d8a7-806a-4c43-8c57-e2a7799f6d68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77179", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mvy5roy6io2b", "content": "\ud83d\udccc CVE-2026-77179: Docker's hypervisor for Mac compromised (Docker Desktop, Docker Sandboxes) https://www.cyberhub.blog/article/32315-cve-2026-77179-dockers-hypervisor-for-mac-compromised-docker-desktop-docker-sandboxes", "creation_timestamp": "2026-09-20T21:37:06.486491Z"} 2026-09-20T21:37:06.486491+00:00 https://vulnerability.circl.lu/sighting/29f64bba-1ed5-43e4-a46c-c6562b48ca52/export 2026-10-07T17:46:16.522157+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "29f64bba-1ed5-43e4-a46c-c6562b48ca52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77179", "type": "seen", "source": "https://t.me/pphm_HackerNews/3196", "content": "\ud83d\udd34 Docker Sandboxes Vulnerabilities Let Malicious Guests Escape Workspace and Access Host Files\n\nDocker has released security fixes for two serious vulnerabilities in Docker Sandboxes that could let a malicious guest environment bypass workspace isolation and access sensitive resources on the host.\n\nThese flaws, identified as CVE-2026-77179 and CVE-2026-79994, were addressed in Docker Sandboxes version 0.42.0, which was released on September 7.\n\nDocker Sandboxes isolate development agents and workloads while selectively sharing a host workspace. Both vulnerabilities arise from improper handling of pathnames after an authorization decision: a compromised sandbox could exploit symbolic links to alter a directory path between the validation and subsequent host-side access.", "creation_timestamp": "2026-09-20T10:00:04.984403Z"} 2026-09-20T10:00:04.984403+00:00 https://vulnerability.circl.lu/sighting/82fd7682-d4fb-47e8-9bc0-5bea004e85d3/export 2026-10-07T17:46:16.522258+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "82fd7682-d4fb-47e8-9bc0-5bea004e85d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77179", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mvukaw7nmf2i", "content": "CVE-2026-77179 is trending. Hype score 1, currently #7 on cvemon.\n\nOn macOS, the virtio-fs host server used by Docker Sandboxes improperly follows symlinks when reopening an unlinked file from a stored path. A malicious guest can replace a parent\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-77179", "creation_timestamp": "2026-09-19T11:09:43.255374Z"} 2026-09-19T11:09:43.255374+00:00 https://vulnerability.circl.lu/sighting/81787064-47e5-498e-a19f-b4edee946fb0/export 2026-10-07T17:46:16.522357+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "81787064-47e5-498e-a19f-b4edee946fb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77179", "type": "seen", "source": "https://gist.github.com/ichintu/3891ce0c6380cb100014a71d3f634404", "content": "This daily threat intelligence briefing highlights three critical security developments:\n\n- **Supply Chain Breach & Credential Theft:** CrowdSec reported that a May supply chain attack on TanStack npm packages compromised employee credentials. An unrevoked GitHub account belonging to a departed employee was exploited to copy ~170 private repositories.\n- **CISA KEV Catalog Updates:** CISA added three actively exploited Linux kernel vulnerabilities, plus flaws in Acronis Backup and Google Pixel, to its Known Exploited Vulnerabilities catalog.\n- **Critical Public Vulnerabilities:**\n \u2022 **Totolink Routers:** CVE-2026-93741 (CVSS 10.0) is a publicly exploitable remote buffer overflow in A3002MU firmware.\n \u2022 **Docker Desktop:** CVE-2026-77179 details a hypervisor escape vulnerability affecting macOS environments.\n \u2022 **WordPress Gravity Forms:** CVE-2026-84434 (CVSS 9.8) allows unauthenticated attackers to bypass file validation and achieve remote code execution.\n\n**Recommendation:** Organizations should immediately patch affected software, revoke unused or departed-employee credentials, and monitor CISA alerts for active exploitation indicators.", "creation_timestamp": "2026-09-19T08:02:12.173505Z"} 2026-09-19T08:02:12.173505+00:00 https://vulnerability.circl.lu/sighting/545414dc-28fd-454f-a0f4-e751b0180ec9/export 2026-10-07T17:46:16.522466+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "545414dc-28fd-454f-a0f4-e751b0180ec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77179", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3mvu3ypf77k2x", "content": "CVE-2026-77179: Docker's hypervisor for Mac compromised (Docker Desktop, Docker Sandboxes)", "creation_timestamp": "2026-09-19T06:54:35.129079Z"} 2026-09-19T06:54:35.129079+00:00 https://vulnerability.circl.lu/sighting/0e9faeca-7776-4e7d-8933-4f674d88451d/export 2026-10-07T17:46:16.522576+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0e9faeca-7776-4e7d-8933-4f674d88451d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77179", "type": "published-proof-of-concept", "source": "Telegram/bMrHpr_r9xZpO7JQ4CEKZDzcR1aO0SYfyuds_gEqNEAaBQ", "content": "", "creation_timestamp": "2026-09-19T00:00:42.962203Z"} 2026-09-19T00:00:42.962203+00:00