{"vulnerability": "CVE-2026-34009", "sightings": [{"uuid": "47022c5a-9977-46ce-a96c-3f312653f03b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34009", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117444281179556093", "content": "CVE-2026-34009 **Container Escape** Host user home directory mounted with write access into application container An improper isolation or compartmentalization vulnerability has been reported to affect Notes Station 3. If a local attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system.\nWe have already fixed the vulnerability in the following version:Notes Station 3 3.9.11 and later\nhttps://www.cve.org/CVERecord?id=CVE-2026-34009https://www.qnap.com/en/app-release-notes?keyword=Notes%20Station%203&app=NotesStation3&product-line=nas#QNAPSystemsInc. #NotesStation3#CVE_2026_34009#bot", "creation_timestamp": "2026-10-15T09:45:13.575907Z"}]}