{"metadata": {"vulnerability": "CVE-2026-105445", "count": 52, "kinds": {"milestone": 4, "sighting": 40, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-10-05T13:28:16.360Z", "date_only": false, "value": "2026-10-05T13:28:16.360Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-105445", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-13T15:20:43.864Z", "date_only": false, "value": "2026-10-13T15:20:43.864108Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mxrdhtmcwq2m", "record": "CVE-2026-105445", "field": "creation_timestamp", "uuid": "51919ea4-e469-4a62-8b75-dd10e396a3fb", "content": "Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user's container repositories using a personal access token (PAT).", "url": "https://bsky.app/profile/bleepingcomputer.com/post/3mxrdhtmcwq2m"}, {"timestamp": "2026-10-13T15:32:08.978Z", "date_only": false, "value": "2026-10-13T15:32:08.978674Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/hrbrmstr/statuses/117434320597272698", "record": "cve-2026-105445", "field": "creation_timestamp", "uuid": "ef2b4a5c-403b-4c5e-aa66-d36289ec6bf1", "content": "Don't use Docker.\nhttps://www.docker.com/blog/docker-hub-security-advisory-cve-2026-105445/", "url": "https://mastodon.social/users/hrbrmstr/statuses/117434320597272698"}, {"timestamp": "2026-10-13T15:32:18.981Z", "date_only": false, "value": "2026-10-13T15:32:18.981340Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hrbrmstr.mastodon.social.ap.brid.gy/post/3mxre4jzocse2", "record": "cve-2026-105445", "field": "creation_timestamp", "uuid": "9677fc50-0b35-4f2c-875a-0f13b95ad5cc", "content": "Don't use Docker.\n\nhttps://www.docker.com/blog/docker-hub-security-advisory-cve-2026-105445/", "url": "https://bsky.app/profile/hrbrmstr.mastodon.social.ap.brid.gy/post/3mxre4jzocse2"}, {"timestamp": "2026-10-13T15:33:38.788Z", "date_only": false, "value": "2026-10-13T15:33:38.788297Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/117434326609355676", "record": "CVE-2026-105445", "field": "creation_timestamp", "uuid": "4a079db0-7db8-4dfe-9c22-fe5ca69efb34", "content": "Docker Hub flaw let attackers impersonate users, tamper with images\nDocker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers impersonate other users and tamper with their container images, BleepingComputer reports. The flaw involved personal access tokens being reassigned to a designated organization owner without changing the token\u2019s secret or obtaining the target\u2019s consent. https://www.bleepingcomputer.com/news/security/docker-hub-flaw-let-attackers-impersonate-users-tamper-with-images/", "url": "https://infosec.exchange/users/edwardk/statuses/117434326609355676"}, {"timestamp": "2026-10-13T15:33:39.435Z", "date_only": false, "value": "2026-10-13T15:33:39.435854Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mxre6y2blt2w", "record": "CVE-2026-105445", "field": "creation_timestamp", "uuid": "92666292-642c-4eea-9e13-26dec6141487", "content": "Docker Hub flaw let attackers impersonate users, tamper with images\n\nDocker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers impersonate other users and tamper with their container images... https://threatintel.cc/2026/10/13/docker-hub-flaw-let-attackers.html", "url": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mxre6y2blt2w"}, {"timestamp": "2026-10-13T15:38:28.809Z", "date_only": false, "value": "2026-10-13T15:38:28.809373Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxrehluhdq2f", "record": "CVE-2026-105445", "field": "creation_timestamp", "uuid": "5f82faac-89be-4d43-8789-45efcd2901b8", "content": "Docker Hub\u306e\u8106\u5f31\u6027\u3001\u653b\u6483\u8005\u306b\u3088\u308b\u30e6\u30fc\u30b6\u30fc\u306a\u308a\u3059\u307e\u3057\u3068\u30a4\u30e1\u30fc\u30b8\u6539\u3056\u3093\u3092\u8a31\u3059\u6050\u308c\n\nDocker\u306f\u3001Docker Hub\u306b\u91cd\u5927\u306a\u8106\u5f31\u6027\uff08CVE-2026-105445\uff09\u304c\u3042\u3063\u305f\u3053\u3068\u3092\u516c\u8868\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3059\u308b\u3068\u3001\u653b\u6483\u8005\u306f\u500b\u4eba\u30a2\u30af\u30bb\u30b9\u30c8\u30fc\u30af\u30f3\uff08PAT\uff09\u3092\u4f7f\u3063\u3066\u3001\u4ed6\u306e\u30e6\u30fc\u30b6\u30fc\u306e\u30b3\u30f3\u30c6\u30ca\u30ea\u30dd\u30b8\u30c8\u30ea\u306b\u30a2\u30af\u30bb\u30b9\u3067\u304d\u307e\u3057\u305f\u3002 Docker Hub\u306f\u3001\u30b3\u30f3\u30c6\u30ca\u30a4\u30e1\u30fc\u30b8\u3092\u4fdd\u5b58\u30fb\u5171\u6709\u30fb\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3059\u308b\u305f\u3081\u306e\u30aa", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxrehluhdq2f"}, {"timestamp": "2026-10-13T16:36:01.916Z", "date_only": false, "value": "2026-10-13T16:36:01.916019Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/jbhall56/statuses/117434571888751339", "record": "CVE-2026-105445", "field": "creation_timestamp", "uuid": "ebadf98c-ef16-4362-a062-8e58381a4798", "content": "Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user\u2019s container repositories using a personal access token (PAT). https://www.bleepingcomputer.com/news/security/docker-hub-flaw-let-attackers-impersonate-users-tamper-with-images/", "url": "https://infosec.exchange/users/jbhall56/statuses/117434571888751339"}, {"timestamp": "2026-10-13T16:36:10.402Z", "date_only": false, "value": "2026-10-13T16:36:10.402335Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3mxrhopzjtk2c", "record": "CVE-2026-105445", "field": "creation_timestamp", "uuid": "c0c0ebf5-0c46-4840-8f74-6943e3f196b1", "content": "Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user\u2019s container repositories using a personal access token (PAT). www.bleepingcomputer.com/news/securit...", "url": "https://bsky.app/profile/jbhall56.bsky.social/post/3mxrhopzjtk2c"}, {"timestamp": "2026-10-13T16:57:04.281Z", "date_only": false, "value": "2026-10-13T16:57:04.281656Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mxriu3iqia22", "record": "CVE-2026-105445", "field": "creation_timestamp", "uuid": "5a7fb36a-017d-4602-aae3-1a52929d9c12", "content": "Docker Hub\u306b\u8106\u5f31\u6027(CVE-2026-105445)\u304c\u3042\u308a\u3001\u653b\u6483\u8005\u306f\u4ed6\u30e6\u30fc\u30b6\u30fc\u306b\u306a\u308a\u3059\u307e\u3057\u3001\u30a4\u30e1\u30fc\u30b8\u3092\u6539\u3056\u3093\u53ef\u80fd\u3002", "url": "https://bsky.app/profile/postac001.bsky.social/post/3mxriu3iqia22"}, {"timestamp": "2026-10-13T17:35:20.071Z", "date_only": false, "value": "2026-10-13T17:35:20.071Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-105445", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T17:35:20.071Z", "date_only": false, "value": "2026-10-13T17:35:20.071Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Docker", "record": "CVE-2026-105445", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T17:48:42.396Z", "date_only": false, "value": "2026-10-13T17:48:42.396869Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117434857680857655", "record": "cve-2026-105445", "field": "creation_timestamp", "uuid": "7262c38e-178f-4f03-8ae1-cc3163b29165", "content": "CVE-2026-105445 Docker Hub account conversion could reassign an active personal access token to another user An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a personal access token (PAT) they controlled to another Docker Hub user without rotating or revoking the token secret. The unchanged PAT then authenticated to the registry as the recipient and could pull, push, or delete images, within its scopes, in repositories accessible to that user, including organization repositories.\nhttps://www.cve.org/CVERecord?id=CVE-2026-105445https://www.docker.com/blog/docker-hub-security-advisory-cve-2026-105445/https://docs.docker.com/accounts/organization/setup/convert-account/https://ghostpat.com/#docker #Docker #DockerHub#CVE_2026_105445#bot", "url": "https://infosec.exchange/users/cve/statuses/117434857680857655"}, {"timestamp": "2026-10-13T18:02:41.016Z", "date_only": false, "value": "2026-10-13T18:02:41.016132Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mxrmjhfwye2r", "record": "CVE-2026-105445", "field": "creation_timestamp", "uuid": "d21c89da-8c92-486a-9fe7-71d4f236b4d4", "content": "\ud83d\udcf0 Docker Hub flaw let attackers impersonate users, tamper with images\n\nDocker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user's conta...\n\nhttps://tinyurl.com/2y2g9kk7 #TechNews #CrustyTLDR", "url": "https://bsky.app/profile/crustytldr.bsky.social/post/3mxrmjhfwye2r"}, {"timestamp": "2026-10-13T18:15:53.961Z", "date_only": false, "value": "2026-10-13T18:15:53.961074Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxrnb2u5qc2h", "record": "CVE-2026-105445", "field": "creation_timestamp", "uuid": "0668bb52-9541-42be-8744-d06872490f29", "content": "\ud83d\udee1\ufe0f Most-discussed CVEs on Bluesky, last 24h\n\n1. CVE-2026-97229 \u00b7 29 people\n2. CVE-2026-104935 \u00b7 15 people \ud83d\udd25\n3. CVE-2026-105445 \u00b7 7 people\n4. CVE-2026-102255 \u00b7 6 people\n5. CVE-2026-85097 \u00b7 6 people\n\n\ud83d\udd25 = on CISA's Known Exploited list \u00b7 details in the thread \ud83e\uddf5", "url": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxrnb2u5qc2h"}, {"timestamp": "2026-10-13T18:15:55.357Z", "date_only": false, "value": "2026-10-13T18:15:55.357318Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxrnb2yu4s2h", "record": "CVE-2026-105445", "field": "creation_timestamp", "uuid": "546db53a-1d78-446e-b656-6aac64e40732", "content": "3. CVE-2026-105445 \u00b7 7 people\n\ud83d\udfe5 Critical 9.4 \u00b7 Docker Hub\n\nDocker Hub account conversion could reassign an active personal access token to another user", "url": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxrnb2yu4s2h"}, {"timestamp": "2026-10-13T18:17:13Z", "date_only": false, "value": "2026-10-13T18:17:13Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-PHQ5-VQ2M-8RP9", "record": "GHSA-PHQ5-VQ2M-8RP9", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-13T18:17:13.167Z", "date_only": false, "value": "2026-10-13T18:17:13.167", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-105445", "record": "FKIE_CVE-2026-105445", "field": "published"}, {"timestamp": "2026-10-13T18:21:57.282Z", "date_only": false, "value": "2026-10-13T18:21:57.282276Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mxrnlw6azx2q", "record": "CVE-2026-105445", "field": "creation_timestamp", "uuid": "44547be7-31b0-406a-8694-29e3da53add9", "content": "\ud83e\udd16 CVE-2026-105445 (critical): Docker Hub reassigned a user's PAT to a new org owner without rotating the secret, so the attacker's token authenticated as the target \u2014 pull/push/delete images. Critical supply chain risk. Fixed Sept 30.\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-105445", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mxrnlw6azx2q"}, {"timestamp": "2026-10-13T18:30:57Z", "date_only": false, "value": "2026-10-13T18:30:57Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PHQ5-VQ2M-8RP9", "record": "GHSA-PHQ5-VQ2M-8RP9", "field": "published"}, {"timestamp": "2026-10-13T18:30:57Z", "date_only": false, "value": "2026-10-13T18:30:57Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PHQ5-VQ2M-8RP9", "record": "GHSA-PHQ5-VQ2M-8RP9", "field": "modified"}, {"timestamp": "2026-10-13T18:45:50.660Z", "date_only": false, "value": "2026-10-13T18:45:50.660346Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mxrowmeqmm2m", "record": "CVE-2026-105445", "field": "creation_timestamp", "uuid": "cd167d22-fa7e-402c-8102-5aeafb78b462", "content": "Read the latest Docker Hub security advisory regarding CVE-2026-105445. Learn how this critical access token vulnerability impacts supply chain security.\n\n#DockerHub #SecurityAdvisory #CVE2026105445 #CyberSecurity #SupplyChain", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mxrowmeqmm2m"}, {"timestamp": "2026-10-13T20:08:50.298Z", "date_only": false, "value": "2026-10-13T20:08:50.298807Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxrtl246z72r", "record": "CVE-2026-105445", "field": "creation_timestamp", "uuid": "85e5d947-b8ca-4dc5-8cec-e2b27c460723", "content": "\ud83d\udea8 CVE-2026-105445 \u2014 CVSS 9.4 CRITICAL\n\nAn Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105445\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxrtl246z72r"}, {"timestamp": "2026-10-13T21:40:05.913Z", "date_only": false, "value": "2026-10-13T21:40:05.913748Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxryoa3a6227", "record": "CVE-2026-105445", "field": "creation_timestamp", "uuid": "7e210246-6d9e-42fc-b1c9-d4261bbdeed7", "content": "CVE-2026-105445\nDocker Hub\u2019s feature for converting a personal account to an organization lets a logged\u2011in user move a personal access token they own to a different Docker Hub account without changing the token. The token\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxryoa3a6227"}, {"timestamp": "2026-10-13T23:00:43Z", "date_only": false, "value": "2026-10-13T23:00:43.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/VulnerabilityNews/44895", "record": "CVE-2026-105445", "field": "creation_timestamp", "uuid": "162118e7-c227-40e4-8847-55d20f5d0c82", "content": "Docker Hub flaw let attackers impersonate users, tamper with images\n\nDocker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user's container repositories using a personal access token (PAT). [...]\nhttps://www.bleepingcomputer.com/news/security/docker-hub-flaw-let-attackers-impersonate-users-tamper-with-images/", "url": "https://t.me/VulnerabilityNews/44895"}, {"timestamp": "2026-10-13T23:19:33.052Z", "date_only": false, "value": "2026-10-13T23:19:33.052629Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mxs6a2alle2n", "record": "CVE-2026-105445", "field": "creation_timestamp", "uuid": "488860b8-20c8-44e5-b32d-75deac8f489a", "content": "CVE-2026-105445 is trending. Hype score 10, currently #4 on cvemon.\n\nAn Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a personal access token\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-105445", "url": "https://bsky.app/profile/cvemon.bsky.social/post/3mxs6a2alle2n"}, {"timestamp": "2026-10-14T03:13:51.737Z", "date_only": false, "value": "2026-10-14T03:13:51.737396Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mxslcylmmg2s", "record": "cve-2026-105445", "field": "creation_timestamp", "uuid": "9c27b127-8829-47a1-b493-8144c6cc5f70", "content": "\ud83d\udcf0 Celah Keamanan Kritis di Docker Hub Memungkinkan Penyerang Menyamar sebagai Pengguna dan Memanipulasi Image\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/10/14/celah-keamanan-kritis-docker-hub-cve-2026-105445/\n\n#cloud #container #cyberSecurity #devops #docker #exploit #hacker #", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mxslcylmmg2s"}, {"timestamp": "2026-10-14T04:46:08.920Z", "date_only": false, "value": "2026-10-14T04:46:08.920759Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mxsqi2drib25", "record": "CVE-2026-105445", "field": "creation_timestamp", "uuid": "048759ce-fdc6-4fd9-9f0c-dd6ef0cdedbc", "content": "Docker Hub security advisory: personal access tokens transferred during account-to-organization conversions (CVE-2026-105445) #devops #architecture", "url": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mxsqi2drib25"}, {"timestamp": "2026-10-14T06:39:37.415Z", "date_only": false, "value": "2026-10-14T06:39:37.415524Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mxswsxnicu25", "record": "CVE-2026-105445", "field": "creation_timestamp", "uuid": "ce38a436-c2a1-4148-bbe8-09a914a0212f", "content": "Top 3 CVE for last 7 days:\nCVE-2026-21589: 50 interactions\nCVE-2026-97229: 28 interactions\nCVE-2026-104935: 26 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-104935: 26 interactions\nCVE-2026-97229: 14 interactions\nCVE-2026-105445: 8 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mxswsxnicu25"}, {"timestamp": "2026-10-14T07:26:09Z", "date_only": false, "value": "2026-10-14T07:26:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/BleepingComputer/25785", "record": "CVE-2026-105445", "field": "creation_timestamp", "uuid": "61c7511b-736e-46ab-b9dc-df477f002b6f", "content": "\u200aDocker Hub flaw let attackers impersonate users, tamper with images\n\nDocker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user's container repositories using a personal access token (PAT). [...]\n\nhttps://www.bleepingcomputer.com/news/security/docker-hub-flaw-let-attackers-impersonate-users-tamper-with-images/", "url": "https://t.me/BleepingComputer/25785"}, {"timestamp": "2026-10-14T08:01:22Z", "date_only": false, "value": "2026-10-14T08:01:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/kasperskyb2b/2342", "record": "CVE-2026-105445", "field": "creation_timestamp", "uuid": "31fba8c4-017e-4137-90c8-fc690e286173", "content": "\ud83c\udf83 \u041e\u043a\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u0438\u0439 \u043b\u0438\u0441\u0442\u043e\u043f\u0430\u0434 \u043f\u0430\u0442\u0447\u0435\u043f\u0430\u0434\n\n\u0414\u0430\u0436\u0435 \u0442\u0435\u043c, \u043a\u0442\u043e \u043f\u0440\u0435\u0437\u0438\u0440\u0430\u0435\u0442 \u0425\u044d\u043b\u043b\u043e\u0443\u0438\u043d, \u0435\u0441\u0442\u044c \u0447\u0435\u043c \u0441\u0435\u0431\u044f \u043f\u043e\u043f\u0443\u0433\u0430\u0442\u044c \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043d\u043e\u0432\u044b\u043c\u0438 \u0446\u0438\u0444\u0440\u0430\u043c\u0438 \u0432 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044f\u0445 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445. \u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c CVE ID \u0441 \u0448\u0435\u0441\u0442\u0438\u0437\u043d\u0430\u0447\u043d\u044b\u043c\u0438 \u043d\u043e\u043c\u0435\u0440\u0430\u043c\u0438. Telegram \u0441\u0447\u0438\u0442\u0430\u0435\u0442 \u0438\u0445 \u043d\u043e\u043c\u0435\u0440\u0430\u043c\u0438 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043e\u0432 \ud83e\udd2a. \u041f\u0440\u043e\u0441\u0442\u043e \u0434\u043b\u044f \u043f\u0440\u0438\u043c\u0435\u0440\u0430: CVE-2026-111111.\n\n\u0412\u0447\u0435\u0440\u0430\u0448\u043d\u0438\u0439 Patch Tuesday \u0442\u043e\u0436\u0435 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0432 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0432\u044b\u0440\u0432\u0430\u043b\u0441\u044f \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0442\u0440\u0451\u0445 \u0440\u0430\u0437\u0440\u044f\u0434\u043e\u0432, \u0432 \u043d\u0451\u043c 1414 CVE. \u0412 Microsoft \u043f\u043e\u043d\u044f\u043b\u0438, \u0447\u0442\u043e \u043e\u0441\u043c\u044b\u0441\u043b\u0438\u0442\u044c \u0442\u0430\u043a\u0438\u0435 \u043a\u0440\u0443\u043f\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0431\u0430\u0433\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u044b \u043d\u0435 \u0432 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0438, \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0443 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043f\u043e \u00ab\u043a\u043e\u0433\u043e\u0440\u0442\u0430\u043c \u0440\u0438\u0441\u043a\u0430\u00bb. \u041f\u043e\u043f\u0440\u043e\u0441\u0442\u0443 \u0433\u043e\u0432\u043e\u0440\u044f, \u044d\u0442\u043e \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u043e\u0434\u0438\u043d\u0430\u043a\u043e\u0432\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0438 \u0432\u043b\u0438\u044f\u044e\u0442 \u043d\u0430 \u043e\u0434\u043d\u0438 \u0438 \u0442\u0435 \u0436\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u041a\u043e\u0433\u043e\u0440\u0442\u044b \u043d\u0435 \u0437\u0430\u043c\u0435\u0449\u0430\u044e\u0442 \u043d\u0438 \u043e\u0446\u0435\u043d\u043a\u0443 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438, \u043d\u0438 \u0438\u043d\u0434\u0438\u0432\u0438\u0434\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0438 \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0439 CVE. \u042d\u0442\u043e \u0432\u0441\u043f\u043e\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u0442\u0435\u0445, \u043a\u0442\u043e \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 \u0434\u043b\u044f \u0443\u0447\u0451\u0442\u0430 \u0438 \u043e\u0446\u0435\u043d\u043a\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n1102 \u0434\u0435\u0444\u0435\u043a\u0442\u0430 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u043c \u043f\u0430\u043a\u0435\u0442\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 Windows, 134 \u2014 Office, 36 \u2014 SharePoint Server, 22 \u2014 SQL server, 7 \u2014 Exchange Server. \u041f\u043e\u0434\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0435 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e (677) \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, 317 \u2014 RCE, 40 \u2014 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, 73 \u2014 DoS.\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 86, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 68 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a RCE, 14 \u2014 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, 3 \u2014 \u043a \u0441\u043f\u0443\u0444\u0438\u043d\u0433\u0443 \u0438 1 \u2014 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445. \u041f\u043e\u043c\u0438\u043c\u043e \u044d\u0442\u043e\u0433\u043e, \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u044b \u0434\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0438 \u043e\u0434\u043d\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0437\u0438\u0440\u043e\u0434\u0435\u0439 \u2014 CVE-2026-96951 (CVSS 8.8) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 Windows Shell, \u043e\u043d \u0441\u0443\u0445\u043e \u043e\u043f\u0438\u0441\u0430\u043d \u043a\u0430\u043a \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0442\u044c. \u0417\u0430 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u0435 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f\u0442 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043e\u0432 \u0438\u0437 Fujitsu \u0438 Anthropic. \u0412\u0441\u0435 \u044d\u0442\u0438 \u043a\u0443\u0441\u043e\u0447\u043a\u0438 \u043f\u043b\u043e\u0445\u043e \u0441\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0432 \u043f\u0430\u0437\u0437\u043b, \u0436\u0434\u0451\u043c \u0433\u043b\u0443\u0431\u043e\u043a\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430.\n\n\u0420\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u044b \u0434\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f: CVE-2026-108398 (\u0431\u0430\u0433 \u0432 .NET Framework, \u043e\u0431\u0445\u043e\u0434 \u0437\u0430\u0449\u0438\u0442\u044b WDAC) \u0438 CVE-2026-92707 (\u0434\u0435\u0444\u0435\u043a\u0442 \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u043c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 MessagePack-CSharp, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0439 \u043a DoS).\n\n\u0421\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0438\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432, \u0441\u043e\u0447\u0435\u0442\u0430\u044e\u0449\u0438\u0445 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0441\u0442\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0441 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u043c \u0438\u043c\u043f\u0430\u043a\u0442\u043e\u043c, \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 CVE-2026-65674 (RCE \u0432 SQL Server) -70571 (RCE \u0432 Exchange Server), -70229 (RCE \u0432 AD domain services).\n\n\u0412 Adobe \u043f\u043e \u043c\u0435\u0440\u0435 \u0441\u0438\u043b \u0441\u0442\u0430\u0440\u0430\u044e\u0442\u0441\u044f \u043d\u0435 \u043e\u0442\u0441\u0442\u0430\u0432\u0430\u0442\u044c, \u0432 \u043f\u0430\u043a\u0435\u0442\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 174 \u0434\u0435\u0444\u0435\u043a\u0442\u0430 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u044b\u0434\u0435\u043b\u044f\u044e\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVSS 10) \u0432 ColdFusion \u0438 Commerce/Magento. \u042d\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u044b\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0438\u0437 \u0432\u043d\u0435\u0448\u043d\u0435\u0439 \u0441\u0435\u0442\u0438, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0438\u0445 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c SAP \u0442\u043e\u0436\u0435 \u043d\u0435 \u0441\u043a\u0443\u0447\u043d\u043e, \u043e\u043a\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u0438\u0439 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 20 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f CVE-2026-89111 \u2014 SSRF \u0432 Cloud SDK for Python. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0442\u044f\u043d\u0443\u0432\u0448\u0430\u044f \u043d\u0430 CVSS 10, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0433\u043d\u0430\u0442\u044c \u0442\u043e\u043a\u0435\u043d\u044b OAuth.\n\n\u0415\u0449\u0451 \u043e\u0434\u0438\u043d \u0441\u0440\u043e\u0447\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u0432\u0435\u0447\u0435\u0440\u043e\u043c \u0432 \u043f\u043e\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u0438\u043a \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0438 \u0432 GitLab \u2014 CVE-2026-97229 (CVSS 10) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 GitLab.\n\n\u0415\u0441\u043b\u0438 \u0432\u044b \u0434\u0430\u0432\u043d\u043e \u043d\u0435 \u0441\u043b\u044b\u0448\u0430\u043b\u0438 \u0432 \u043d\u043e\u0432\u043e\u0441\u0442\u044f\u0445 \u0441\u043b\u043e\u0432\u043e Ivanti, \u043d\u0435 \u0431\u0435\u0441\u043f\u043e\u043a\u043e\u0439\u0442\u0435\u0441\u044c \u2014 \u0432\u0441\u0451 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e, \u0432\u0441\u0451 \u0432 \u043f\u043e\u0440\u044f\u0434\u043a\u0435. \u0410\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f CVE-2026-104935 \u0432 Ivanti Connect Secure \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u0415\u0449\u0451 \u043e\u0434\u043d\u043e\u0439 \u0448\u0435\u0441\u0442\u0438\u0437\u043d\u0430\u0447\u043d\u043e\u0439 CVE \u00ab\u043f\u043e\u0440\u0430\u0434\u043e\u0432\u0430\u043b\u00bb Docker \u2014 CVE-2026-105445 \u0432 Docker Hub \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0435\u0440\u0435\u043d\u0430\u0437\u043d\u0430\u0447\u0430\u0442\u044c \u043b\u0438\u0447\u043d\u044b\u0435 \u0442\u043e\u043a\u0435\u043d\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (PAT), \u043f\u043e\u043b\u0443\u0447\u0430\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0447\u0443\u0436\u0438\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #Microsoft @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/2342"}, {"timestamp": "2026-10-14T08:58:58.877Z", "date_only": false, "value": "2026-10-14T08:58:58.877519Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxt6m54url2m", "record": "CVE-2026-105445", "field": "creation_timestamp", "uuid": "87a22e8c-b33c-40a2-acbc-df1467753990", "content": "Docker Hub\u306b\u91cd\u5927\u306a\u8106\u5f31\u6027\u3001\u653b\u6483\u8005\u304c\u30e6\u30fc\u30b6\u30fc\u306b\u306a\u308a\u3059\u307e\u3057\u30b3\u30f3\u30c6\u30ca\u30a4\u30e1\u30fc\u30b8\u3092\u6539\u3056\u3093\u53ef\u80fd\u306b\n\nDocker\u306f\u3001\u30b3\u30f3\u30c6\u30ca\u30ec\u30b8\u30b9\u30c8\u30ea\u306e\u30ec\u30d9\u30eb\u3067\u653b\u6483\u8005\u304c\u4ed6\u306e\u30e6\u30fc\u30b6\u30fc\u306b\u306a\u308a\u3059\u307e\u305b\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027\u304cDocker Hub\u306b\u5b58\u5728\u3057\u3066\u3044\u305f\u3053\u3068\u3092\u516c\u8868\u3057\u307e\u3057\u305f\u3002 \u300cGhostPat\u300d\u3068\u540d\u4ed8\u3051\u3089\u308c\u305f\u3053\u306e\u8106\u5f31\u6027\uff08CVE-2026-105445\uff09\u306f\u3001\u30a2\u30ab\u30a6\u30f3\u30c8\u5909\u63db\u6642\u306bDocker\u304c\u500b\u4eba\u30a2\u30af\u30bb\u30b9\u30c8\u30fc\u30af\u30f3\u3092\u3069\u3046\u6271\u3046\u304b\u3068\u3044\u3046\u70b9\u3092\u7a81\u304f\u3082\u306e\u3067\u3057\u305f", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxt6m54url2m"}, {"timestamp": "2026-10-14T13:23:08.189Z", "date_only": false, "value": "2026-10-14T13:23:08.189032Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mxtnei36ss24", "record": "CVE-2026-105445", "field": "creation_timestamp", "uuid": "f5fdf383-b530-4863-a8fa-21f2c7bf9401", "content": "Docker Hub flaw let attackers impersonate users, tamper with images\n\nDocker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user's container repositories using a personal access token (PAT). [...]\n#hackernews #news", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mxtnei36ss24"}, {"timestamp": "2026-10-14T15:44:56.049Z", "date_only": false, "value": "2026-10-14T15:44:56.049200Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/beyondmachines1/statuses/117439156000750279", "record": "CVE-2026-105445", "field": "creation_timestamp", "uuid": "55aae4e6-f6b7-4eae-89c3-273e32b4c05d", "content": "Docker Hub Fixes Critical Token Flaw Enabling User Impersonation\nDocker Hub resolved a critical vulnerability (CVE-2026-105445) that allowed attackers to impersonate users and tamper with container images by exploiting a flaw in the account conversion process.\n**Check your email for a notification from Docker to see if your account was part of the affected group. Even if you were not notified, rotate your personal access tokens regularly and limit their permissions to only what is necessary.**#cybersecurity #infosec #advisory #vulnerabilityhttps://beyondmachines.net/event_details/docker-hub-fixes-critical-token-flaw-enabling-user-impersonation-1-2-w-t-a/gD2P6Ple2L", "url": "https://infosec.exchange/users/beyondmachines1/statuses/117439156000750279"}, {"timestamp": "2026-10-14T18:15:30.445Z", "date_only": false, "value": "2026-10-14T18:15:30.445329Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxu5pc3usk2q", "record": "CVE-2026-105445", "field": "creation_timestamp", "uuid": "930d8950-3838-4c57-a7bc-39d812d2e1f1", "content": "\ud83d\udee1\ufe0f Most-discussed CVEs on Bluesky, last 24h\n\n1. CVE-2026-104935 \u00b7 30 people \ud83d\udd25\n2. CVE-2026-96951 \u00b7 29 people \ud83d\udd25\n3. CVE-2026-97229 \u00b7 10 people\n4. CVE-2026-105445 \u00b7 9 people\n5. CVE-2026-74580 \u00b7 9 people\n\n\ud83d\udd25 = on CISA's Known Exploited list \u00b7 details in the thread \ud83e\uddf5", "url": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxu5pc3usk2q"}, {"timestamp": "2026-10-14T18:15:32.333Z", "date_only": false, "value": "2026-10-14T18:15:32.333131Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxu5pcfyzk2q", "record": "CVE-2026-105445", "field": "creation_timestamp", "uuid": "abd05967-cf60-4edc-b646-42110ae7376f", "content": "4. CVE-2026-105445 \u00b7 9 people\n\ud83d\udfe5 Critical 9.4 \u00b7 Docker Hub\n\nDocker Hub account conversion could reassign an active personal access token to another user", "url": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxu5pcfyzk2q"}, {"timestamp": "2026-10-15T00:33:30.644Z", "date_only": false, "value": "2026-10-15T00:33:30.644463Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mxust56bsk2f", "record": "CVE-2026-105445", "field": "creation_timestamp", "uuid": "77d74bf1-7a65-47f6-bb9f-2770ffdf2ebb", "content": "Docker Hub\u306b\u91cd\u5927\u306a\u8106\u5f31\u6027\u3001\u4ed6\u4eba\u306e\u6a29\u9650\u3067\u30b3\u30f3\u30c6\u30ca\u30a4\u30e1\u30fc\u30b8\u3092\u6539\u3056\u3093\u53ef\u80fd\u306b\u2015CVE-2026-105445 \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30cb\u30e5\u30fc\u30b9", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mxust56bsk2f"}, {"timestamp": "2026-10-15T01:03:34.681Z", "date_only": false, "value": "2026-10-15T01:03:34.681605Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/lefht.cc/post/3mxuuiwzimc2a", "record": "CVE-2026-105445", "field": "creation_timestamp", "uuid": "5d1f904a-f37c-41bb-9ed5-ee3c2e875018", "content": "test CVE-2026-105445", "url": "https://bsky.app/profile/lefht.cc/post/3mxuuiwzimc2a"}, {"timestamp": "2026-10-15T02:01:10.226Z", "date_only": false, "value": "2026-10-15T02:01:10.226269Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sansisc.bsky.social/post/3mxuxpy4bqh2g", "record": "CVE-2026-105445", "field": "creation_timestamp", "uuid": "6c800bec-d9cb-4062-a7e6-8681987f3735", "content": "SANS Stormcast Thursday, October 15th, 2026: Orphaned VBA Macros in AutoCAD DWG Files; Ledger Wallet Hardware Implants; Docker Hub Token Bug (CVE-2026-105445); curl HTTP/2 RCE\n https://isc.sans.edu/podcastdetail/10138", "url": "https://bsky.app/profile/sansisc.bsky.social/post/3mxuxpy4bqh2g"}, {"timestamp": "2026-10-15T17:52:48.274Z", "date_only": false, "value": "2026-10-15T17:52:48.274100Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/chrisshort.net/post/3mxwmvmwego25", "record": "CVE-2026-105445", "field": "creation_timestamp", "uuid": "47cd9354-ddde-4ad2-aa3b-7818484fa980", "content": "Docker Hub Security Advisory: CVE-2026-105445 | Docker #devopsish www.docker.com/blog/...", "url": "https://bsky.app/profile/chrisshort.net/post/3mxwmvmwego25"}, {"timestamp": "2026-10-15T17:52:50.866Z", "date_only": false, "value": "2026-10-15T17:52:50.866708Z", "kind": "sighting", "label": "Seen", "source": "https://hachyderm.io/users/ChrisShort/statuses/117446198493917996", "record": "cve-2026-105445", "field": "creation_timestamp", "uuid": "35a712a3-805a-49e6-af37-a7d9e99eef42", "content": "Docker Hub Security Advisory: CVE-2026-105445 | Docker #devopsish https://www.docker.com/blog/docker-hub-security-advisory-cve-2026-105445/", "url": "https://hachyderm.io/users/ChrisShort/statuses/117446198493917996"}, {"timestamp": "2026-10-15T18:02:37.577Z", "date_only": false, "value": "2026-10-15T18:02:37.577978Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bufigol.bsky.social/post/3mxwnh5df7s2y", "record": "CVE-2026-105445", "field": "creation_timestamp", "uuid": "a76f7b49-d33b-4332-bea0-b0452d650583", "content": "Docker Hub CVE-2026-105445: converting an account to an org handed its tokens to the new owner \u2014 same secret, no consent. Open 2+ years. Not a crypto bug \u2014 an identity change without key rotation. #SupplyChain #DevOps\nwww.docker.com/blog/docker-...", "url": "https://bsky.app/profile/bufigol.bsky.social/post/3mxwnh5df7s2y"}, {"timestamp": "2026-10-16T07:25:29.572Z", "date_only": false, "value": "2026-10-16T07:25:29.572788Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybowl.bsky.social/post/3mxy2cta5pj22", "record": "CVE-2026-105445", "field": "creation_timestamp", "uuid": "03044072-6d09-491b-a68b-06215ce3f6cc", "content": "Vuln\u00e9rabilit\u00e9s critiques (CVSS \u2265 9) \u00b7 4\n\u2022 Google Chrome (couche ANGLE) (CVE-2026-110152), CVSS 9.6 (Cyberveille Esant\u00e9)\n\u2022 Docker Hub (CVE-2026-105445), CVSS 9.4 (IT-Connect)\n\u2022 Noyau Linux (CVE-2026-99999), CVSS 9.3 (Hacktualit\u00e9s)", "url": "https://bsky.app/profile/cybowl.bsky.social/post/3mxy2cta5pj22"}, {"timestamp": "2026-10-16T09:43:00Z", "date_only": false, "value": "2026-10-16T09:43:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/xakep_ru/20222", "record": "CVE-2026-105445", "field": "creation_timestamp", "uuid": "a5b32040-11b8-4ec6-adb3-fd1f81cd5d66", "content": "\u0412 Docker Hub \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0431\u0430\u0433 \u0434\u0432\u0443\u0445\u043b\u0435\u0442\u043d\u0435\u0439 \u0434\u0430\u0432\u043d\u043e\u0441\u0442\u0438\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Docker \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-105445 \u0432 Docker Hub, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0435\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043d\u044b\u043c\u0438 \u043e\u0431\u0440\u0430\u0437\u0430\u043c\u0438. \u0411\u0430\u0433 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b \u0432 \u043a\u043e\u0434\u0435 \u0431\u043e\u043b\u0435\u0435 \u0434\u0432\u0443\u0445 \u043b\u0435\u0442 \u0438 \u043c\u043e\u0433 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a.\n\nhttps://xakep.ru/2026/10/16/cve-2026-105445/", "url": "https://t.me/xakep_ru/20222"}, {"timestamp": "2026-10-19T12:59:31.343Z", "date_only": false, "value": "2026-10-19T12:59:31.343539Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-105445", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-19T12:59:31.343Z", "date_only": false, "value": "2026-10-19T12:59:31.343539Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-105445", "record": "FKIE_CVE-2026-105445", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-19T13:00:13.891Z", "date_only": false, "value": "2026-10-19T13:00:13.891Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-105445", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-19T13:00:13.891Z", "date_only": false, "value": "2026-10-19T13:00:13.891Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-105445", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-19T13:16:53.920Z", "date_only": false, "value": "2026-10-19T13:16:53.920", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-105445", "record": "FKIE_CVE-2026-105445", "field": "lastModified"}, {"timestamp": "2026-10-19T15:17:29Z", "date_only": false, "value": "2026-10-19T15:17:29.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/28d3aa3b-3553-40ad-80e8-3c2bbb1fe265", "record": "CVE-2026-105445", "field": "creation_timestamp", "uuid": "54e81f7a-0b12-4c81-9d55-5b67f352487a"}, {"timestamp": "2026-10-24T00:05:49Z", "date_only": false, "value": "2026-10-24T00:05:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/106888", "record": "CVE-2026-105445", "field": "creation_timestamp", "uuid": "581d96d7-a32d-457b-a4a9-346bf29be674", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a docker-hub-pat-check\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a CompleteTech-LLC\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-23 23:49:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nStandalone defensive checker project for CVE-2026-105445: Docker Hub account-conversion PAT reassignment. One exploit per repository; implementation pending.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/106888"}, {"timestamp": "2026-10-24T00:05:49Z", "date_only": false, "value": "2026-10-24T00:05:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/106888", "record": "CVE-2026-105445", "field": "creation_timestamp", "uuid": "b4116b5e-8b31-4475-b2d9-2e5180b02c3b", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a docker-hub-pat-check\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a CompleteTech-LLC\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-23 23:49:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nStandalone defensive checker project for CVE-2026-105445: Docker Hub account-conversion PAT reassignment. One exploit per repository; implementation pending.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/106888"}]}