MMoby

Products

Exploited and recent CVEs

• CVE-2026-121520 Medium 4.5 Malicious client could set xattr value outside of BuildKit state directory 0.1%
• CVE-2026-121522 Medium 6.7 Possible panic from Git source resolver 0.1%
• CVE-2026-61801 Medium 5.5 github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files 0.1%
• CVE-2026-92543 High 7.6 Docker Engine insecure-registry fallback via malicious DNS responses <0.1%
• CVE-2026-92542 Medium 6.9 Blind VXLAN injection into encrypted overlay networks from cluster peer <0.1%
• CVE-2026-93321 Medium 6.9 Malformed LLB file operation can crash buildkitd 0.2%
• CVE-2026-93315 Medium 5.8 BuildKit proxy CA cleanup can be disrupted by build steps <0.1%
• CVE-2026-93326 Medium 6.0 Crafted Git build source can bypass certain policy validation 0.2%
• CVE-2026-93323 Medium 6.8 Oversized Dockerfile or .dockerignore can exhaust buildkitd memory 0.1%
• CVE-2026-93322 Medium 6.9 Malformed MergeOp can crash the BuildKit daemon 0.1%
• CVE-2026-93320 Medium 6.0 BuildKit improperly handles special files in build snapshots 0.1%
• CVE-2026-93319 Medium 5.7 A malicious frontend can cause a daemon panic <0.1%
• CVE-2026-93318 High 7.5 Cache poisoning via unvalidated image layer DiffIDs 0.2%
• CVE-2026-93317 Medium 5.9 Container blob cache can accept unverified content 0.2%
• CVE-2026-93316 High 7.1 Starting daemon with --cdi-disabled flag can lead to panic on specific builds 0.2%
• CVE-2026-75593 High 7.2 BuildKit: Malicious client can bypass destination directory validation on local sources upload 0.5%
• CVE-2026-61711 Medium 5.3 BuildKit: Custom frontend could bypass Seccomp/AppArmor 0.4%
• CVE-2026-61712 Low 2.3 BuildKit: Possible runtime DoS via unbounded group parsing 0.4%
• CVE-2026-17106 High 7.1 Tar extraction in moby/go-archive can write outside the destination directory via link following 0.4%
• CVE-2026-15793 Medium 6.5 Git source checkout from a bundle file could lead to command injection 0.2%
• CVE-2026-15792 Medium 6.3 Possible panic when incorrect parameters sent from frontend 0.2%
• CVE-2026-15791 Low 3.3 LLB file operation can be tricked to remove /tmp directory contents 0.2%
• CVE-2026-15789 Medium 6.9 Malicious client can bypass destination directory validation on local sources upload 0.3%
• CVE-2026-15788 Medium 5.6 WCOW cache mount source selector resolves NTFS junctions outside of cache root 0.4%
• CVE-2026-42306 High 7.2 Moby: Race condition in docker cp allows bind mount redirection to host path 0.1%
• CVE-2026-41568 Medium 6.1 Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap 0.1%
• CVE-2026-41567 High 7.2 Docker: `PUT /containers/{id}/archive` executes container binary on the host 0.2%
• CVE-2026-41567 High 7.2 Docker: `PUT /containers/{id}/archive` executes container binary on the host 0.2%
• CVE-2026-35469 Medium 6.5 SpdyStream: DOS on CRI 0.7%
• CVE-2026-33997 Medium 6.8 Moby: Off-by-one error in plugin privilege validation 0.4%