Docker Hub flaw let attackers impersonate users, tamper with images
Teaser from the source
Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user's container repositories using a personal access token (PAT). [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerLinked advisories
- CVE-2026-105445Eine Schwachstelle bei der falschen Rechtezuweisung in der Funktion zur Umwandlung von Konten in Organisationen von Docker Hub ermöglichte e...
- CVE-2026-105445Eine Schwachstelle bei der falschen Rechtezuweisung in der Funktion zur Umwandlung von Konten in Organisationen von Docker Hub ermöglichte e...
More on impersonate
Other advisories
- HighCVE-2026-87817GitPython: Repository content can impersonate the git directory, leading to arbitrary code execution
- HighCVE-2026-87817GitPython: Repository content can impersonate the git directory, leading to arbitrary code execution
- CriticalCVE-2026-61682kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace in github.com/kcp-dev/kcp
- CriticalCVE-2026-61682kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace
- CriticalCVE-2026-61682kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace
- Not ratedosv:CVE-2026-61682kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace
- MediumCVE-2026-90955Affected versions of MISP’s interactive CLI shell do not reliably preserve the identity of the impersonated MISP user across audit logging.
- Not ratedosv:GHSA-2pxq-5vcg-rq29Duplicate Advisory: Repository content can impersonate the git directory, leading to arbitrary code execution
Other news entries
- Fake Claude, ChatGPT Attacks Surge, Putting Developers at RiskNewsDark Reading
- Fake Arch Linux packages push malware with root privilegesNewsBleepingComputer
- Two characters open up a world of typosquatting opportunities in Chromium browsersNewsThe Register — Security
- Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA CodesNewsThe Hacker News
- Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and TaiwanNewsThe Hacker News
- Chinese Hackers Impersonate US Officials for AI Cyber EspionageNewsDark Reading
- China-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM PhishingNewsThe Hacker News
- Hackers Use ChatGPT Custom GPTs in ClickFix AttacksNewsSecurityWeek
ID