<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-02T21:07:20.750775+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3366cab3-1b97-4b08-b22d-5b27d3689109/export</id>
    <title>3366cab3-1b97-4b08-b22d-5b27d3689109</title>
    <updated>2026-09-02T21:07:20.777838+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3366cab3-1b97-4b08-b22d-5b27d3689109", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17106", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtbvoxpax62a", "content": "CVE-2026-17106 (CVSS 7.1) is the Docker CopyEscape vulnerability, letting malicious containers overwrite host files and trigger code execution.\n\n#Docker #CopyEscape #CVE202617106 #InfoSec", "creation_timestamp": "2026-08-17T14:23:28.157342Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3366cab3-1b97-4b08-b22d-5b27d3689109/export"/>
    <published>2026-08-17T14:23:28.157342+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5ab5ee9d-41e9-4325-93ae-b877d5f0d069/export</id>
    <title>5ab5ee9d-41e9-4325-93ae-b877d5f0d069</title>
    <updated>2026-09-02T21:07:20.779847+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5ab5ee9d-41e9-4325-93ae-b877d5f0d069", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17106", "type": "seen", "source": "https://bsky.app/profile/umbra-codex.bsky.social/post/3mtbnpjtk672j", "content": "CopyEscape (CVE-2026-17106) isn't a container escape.\n\n`docker cp` tars in the daemon, extracts in your CLI. The container races the walker to plant a symlink; the CLI validates one path and writes another.\n\nArbitrary write as whoever ran `docker cp`.\n\nFix: 29.7.2\n\n#DevSecOps #Docker", "creation_timestamp": "2026-08-17T12:00:36.880689Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5ab5ee9d-41e9-4325-93ae-b877d5f0d069/export"/>
    <published>2026-08-17T12:00:36.880689+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e83dcfc6-e00d-4e43-8337-759121a2287f/export</id>
    <title>e83dcfc6-e00d-4e43-8337-759121a2287f</title>
    <updated>2026-09-02T21:07:20.779989+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e83dcfc6-e00d-4e43-8337-759121a2287f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17106", "type": "published-proof-of-concept", "source": "Telegram/9qYdJNeZ50siptVHrqc-g91N4K0CPGozDwGl0Etd8sr4-fM", "content": "", "creation_timestamp": "2026-08-16T00:00:21.989372Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e83dcfc6-e00d-4e43-8337-759121a2287f/export"/>
    <published>2026-08-16T00:00:21.989372+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/611a44c2-7a95-40de-8a7a-215c24844a6e/export</id>
    <title>611a44c2-7a95-40de-8a7a-215c24844a6e</title>
    <updated>2026-09-02T21:07:20.780088+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "611a44c2-7a95-40de-8a7a-215c24844a6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17106", "type": "published-proof-of-concept", "source": "Telegram/tIFQ-YzRP5aIVcZwsmxIy0E468ZZAfAf6IwxQbXWzKsWGok", "content": "", "creation_timestamp": "2026-08-16T00:00:21.738899Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/611a44c2-7a95-40de-8a7a-215c24844a6e/export"/>
    <published>2026-08-16T00:00:21.738899+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f32ba3d6-f477-41da-a251-1e9fe401d583/export</id>
    <title>f32ba3d6-f477-41da-a251-1e9fe401d583</title>
    <updated>2026-09-02T21:07:20.780177+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f32ba3d6-f477-41da-a251-1e9fe401d583", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17106", "type": "seen", "source": "Telegram/tIFQ-YzRP5aIVcZwsmxIy0E468ZZAfAf6IwxQbXWzKsWGok", "content": "", "creation_timestamp": "2026-08-15T08:00:07.346921Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f32ba3d6-f477-41da-a251-1e9fe401d583/export"/>
    <published>2026-08-15T08:00:07.346921+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e855946e-2e2f-4e63-baf0-2d46fd6e9b4e/export</id>
    <title>e855946e-2e2f-4e63-baf0-2d46fd6e9b4e</title>
    <updated>2026-09-02T21:07:20.780304+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e855946e-2e2f-4e63-baf0-2d46fd6e9b4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17106", "type": "seen", "source": "Telegram/9qYdJNeZ50siptVHrqc-g91N4K0CPGozDwGl0Etd8sr4-fM", "content": "", "creation_timestamp": "2026-08-15T08:00:07.201769Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e855946e-2e2f-4e63-baf0-2d46fd6e9b4e/export"/>
    <published>2026-08-15T08:00:07.201769+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/031587f6-1a83-464b-ac75-2283d407dc8e/export</id>
    <title>031587f6-1a83-464b-ac75-2283d407dc8e</title>
    <updated>2026-09-02T21:07:20.780397+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "031587f6-1a83-464b-ac75-2283d407dc8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-17106", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msxc5mgs7e2h", "content": "\ud83d\udccc Docker cp Vulnerability Allows Container-to-Host Arbitrary File Write (CVE-2026-17106) https://www.cyberhub.blog/article/30568-docker-cp-vulnerability-allows-container-to-host-arbitrary-file-write-cve-2026-17106", "creation_timestamp": "2026-08-13T09:07:07.887151Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/031587f6-1a83-464b-ac75-2283d407dc8e/export"/>
    <published>2026-08-13T09:07:07.887151+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/00c9858c-6677-471f-804f-facfb0a02a49/export</id>
    <title>00c9858c-6677-471f-804f-facfb0a02a49</title>
    <updated>2026-09-02T21:07:20.780493+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://vulnerability.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "00c9858c-6677-471f-804f-facfb0a02a49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-17106", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0996", "content": "", "creation_timestamp": "2026-08-13T08:48:12.280029Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/00c9858c-6677-471f-804f-facfb0a02a49/export"/>
    <published>2026-08-13T08:48:12.280029+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/581b9b9b-434f-4071-b587-bb33737144e6/export</id>
    <title>581b9b9b-434f-4071-b587-bb33737144e6</title>
    <updated>2026-09-02T21:07:20.781679+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "581b9b9b-434f-4071-b587-bb33737144e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17106", "type": "seen", "source": "https://www.acn.gov.it/portale/w/docker-poc-pubblico-per-lo-sfruttamento-della-cve-2026-17106", "content": "Disponibile un Proof of Concept (PoC) per lo sfruttamento della vulnerabilit\u00e0 identificata dalla CVE-2026-17106, gi\u00e0 sanata dal vendor, che interessa Docker Desktop, applicazione sviluppata da Docker Inc. che fornisce un ambiente completo per eseguire e gestire container Docker su Windows e macOS.", "creation_timestamp": "2026-08-13T01:00:35.074780Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/581b9b9b-434f-4071-b587-bb33737144e6/export"/>
    <published>2026-08-13T01:00:35.074780+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ecf0424f-a1d7-4b58-a9a2-0598238679c6/export</id>
    <title>ecf0424f-a1d7-4b58-a9a2-0598238679c6</title>
    <updated>2026-09-02T21:07:20.781795+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ecf0424f-a1d7-4b58-a9a2-0598238679c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17106", "type": "published-proof-of-concept", "source": "Telegram/J7UFmymbxIn8KumOrkK4VS44HM4Alboab9CCQoPlnVBTDCw", "content": "", "creation_timestamp": "2026-08-13T00:00:45.057907Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ecf0424f-a1d7-4b58-a9a2-0598238679c6/export"/>
    <published>2026-08-13T00:00:45.057907+00:00</published>
  </entry>
</feed>
