vendors/docker-kubernetes.htmlSecurity news, advisories and CVEs for Docker / KubernetesMon, 19 Oct 2026 15:01:23 GMT http://www.zerodayinitiative.com/advisories/ZDI-26-758/jbwskgThu, 15 Oct 2026 05:00:00 GMTZDI Published Advisories. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Docker Buildx. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has…AdvisoryVulnerability https://aws.amazon.com/security/security-bulletins/rss/2026-046-aws/p8l4k5Wed, 14 Oct 2026 19:53:01 GMTAWS Security Bulletins. AdvisoryVulnerability https://www.helpnetsecurity.com/2026/10/14/meshery-open-source-cloud-native-manager-kubernetes/1t71cm3Wed, 14 Oct 2026 05:00:01 GMTHelp Net Security. Meshery is an open-source tool for designing, deploying and managing Kubernetes infrastructure, built by Layer5 and its community and hosted as a Cloud Native Computing Foundation project. Teams use it to lay out clusters and applications on a visual canvas,… https://thehackernews.com/2026/10/docker-fixes-critical-two-year-old-hub.html13yxqk0Tue, 13 Oct 2026 18:03:18 GMTThe Hacker News. A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed the flaw on September 30 and says it found no evidence that anyone exploited it. The flaw was in…VulnerabilitySupply chain https://news.google.com/rss/articles/CBMiZkFVX3lxTFBmY0dfTWUzcFdYM3duYWxBRWpGWkNEeTdNYno5TXBUUlhFUzduODduT2xoa1Q2bjlkSmt1eDJldE1BYmcteG40bFk0UWlSemE0T2ltOHJKT2NJX1lQYW40cHoyX242Z9IBa0FVX3lxTE9ZVDZweTFvV2M1T1VIZWg4c09wbHVjTDFaQlFYVjJjcXpaNERiRV9QX3lJMVJPQUtKY2hhc21uNmNxb2ZVcWdFQXlENlBwN184OERfMDJHLVpERFB6VVFKUFJrel9UbVhobzhj?oc=58tu32aTue, 13 Oct 2026 16:55:34 GMTCybersecurity News. Critical Docker Hub Flaw Lets Attackers Impersonate Users and Push Container Images CyberSecurityNewsVulnerabilitySupply chain https://www.bleepingcomputer.com/news/security/docker-hub-flaw-let-attackers-impersonate-users-tamper-with-images/18fr3ewTue, 13 Oct 2026 15:20:20 GMTBleepingComputer (+1 more sources). Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user's container repositories using a personal access token (PAT). [...]VulnerabilitySupply chain https://securitylabs.datadoghq.com/articles/kubernetes-rbac-built-in-principals-dangerous-permissions/4fy9s2Mon, 05 Oct 2026 00:00:00 GMTDatadog Security Labs. We analyzed RBAC bindings across over 65,000 Kubernetes clusters to find dangerous permissions granted to system:anonymous, system:unauthenticated, and system:authenticated.Research https://thehackernews.com/2026/10/dell-csm-flaws-enable-unauthenticated.htmlmdkswjFri, 02 Oct 2026 17:02:12 GMTThe Hacker News. Dell has released security updates to address multiple critical security flaws in Dell Container Storage Modules (CSM) that could be exploited by bad actors to take over susceptible systems. The vulnerabilities are listed below - CVE-2026-63688 (CVSS score:…Vulnerability https://www.wiz.io/blog/wizos-helm-charts2svwvqWed, 30 Sep 2026 15:52:31 GMTWiz Research. Secure your Kubernetes supply chain with WizOS Helm Charts. Eliminate hidden CI/CD risks and unmaintained dependencies with hardened, signed, and CVE-scanned charts for seamless Kubernetes deployment.ResearchSupply chain https://unit42.paloaltonetworks.com/agentic-ai-kubernetes-operator-risks/29ew09Tue, 29 Sep 2026 10:00:48 GMTUnit 42. We introduce OperTraitor, a tool to audit privileges of Kubernetes operators, identify excessive RBAC risks, and secure non-human identities.Research https://www.darkreading.com/identity-access-management-security/carbonato-botnet-ai-agent-hacked-docker-hostsjxfj5vMon, 28 Sep 2026 20:23:58 GMTDark Reading. The botnet uses the open source Hermes Agent AI framework to execute commands via Telegram and steal AI API keys from exposed Docker hosts.MalwareAI https://aws.amazon.com/security/security-bulletins/rss/2026-050-aws/18lhth2Tue, 22 Sep 2026 19:49:08 GMTAWS Security Bulletins. AdvisoryVulnerability