Vulnerability (CVE)
Docker disclosed on September 15 that malicious code inside a Docker Sandboxes virtual machine on macOS could escape the shared project directory and read or modify files anywhere on the host with the rights of the account running the VM, tracked as...
A placeholder domain that appeared in roughly 1,700 repositories was registered by someone and used to serve malicious lures. Citrix released patches for CVE-2026-88771, an improper input validation flaw allowing unauthenticated arbitrary command...
Cisco warned of a maximum-severity authentication bypass in Identity Services Engine, tracked as CVE-2026-76460 with a CVSS score of 10.0, that is under active exploitation and stems from insufficient authentication control on an API endpoint. The week's...