Docker Hub flaw let attackers impersonate users, tamper with images

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-10-13 15:20 UTC
  • Importiert: 2026-10-14 12:52 UTC
  • CVSS: 9.4
  • Quelle-ID: bleeping_c
  • uid_hash: 965e2fd554692944df7b4e3de80b80415963cccfeb5177934c316b9158e53ea1

Inhalt

Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user's container repositories using a personal access token (PAT). [...]

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-105445

CRITICAL

9.4

CRITICAL

9.4

2026-10-13

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
BleepingComputer

bleeping_c

security_news - de https://www.bleepingcomputer.com/feed/