Imperva (Organization): news timeline & CVEs

Top 10 Best API Security Tools in 2026 [Ranked & Scored]

Salt Security tops a 2026 API security ranking, ahead of Traceable and Akamai’s Noname.

Cyber Security News ranked API security platforms using discovery, behavioral detection, blocking, pricing clarity, and ecosystem, without lab testing. Salt Security leads with 9.0 for behavioral baselining, Traceable is second for trace-context depth, and Akamai’s acquired Noname engine is third for edge integration. Cequence, 42Crunch, Cloudflare, Wallarm, Imperva, and F5 with Wib technology complete a nine-vendor list after consolidation. The piece stresses shadow-API discovery and business-logic abuse that can bypass WAF signatures.

Cyber Security NewsOct 8, 07:27 UTC · 1d agoTools1

CopyEscape Docker Flaw Lets Malicious Containers Overwrite Host Files and Gain Root Access

CopyEscape, CVE-2026-17106, lets malicious containers overwrite host files through Docker's archive copy path.

Imperva disclosed CopyEscape, CVE-2026-17106, in Docker's moby/go-archive handling used by docker cp. A time-of-check/time-of-use race lets a running container turn a directory into a symlink while the archive is built, and vulnerable extraction can then write outside the chosen host destination with the Docker CLI user's permissions. Imperva's proof of concept replaced /usr/bin/runc so a later runtime invocation executed an attacker script as root. Docker fixed Desktop in 4.86.0 on August 10, 2026, go-archive in 0.3.0, and Sandboxes in 0.38.0; active exploitation is not reported.

Cyber Security NewsOct 1, 04:36 UTC · 8d agoExploit / PoC CVE-2026-171062

Docker CopyEscape CVE-2026-17106 Lets Malicious Containers Overwrite Host Files

Docker patches CopyEscape (CVE-2026-17106), which lets malicious containers overwrite host files during docker cp via a symlink race, potentially enabling root code execution.

Imperva's Red Team disclosed CVE-2026-17106 (CopyEscape), a critical Docker vulnerability in the docker cp copy-out path combining a filesystem race condition with unrestricted archive extraction, allowing a malicious container to create or overwrite files on the host. A proof of concept replaced /usr/bin/runc with an attacker-controlled script, converting arbitrary file overwrite into root-level code execution. The flaw also affects Docker Sandboxes' sbx cp command, raising risks in AI agent and coding workflows that retrieve artifacts from untrusted sandboxes. Users should upgrade to Docker Engine and CLI 29.7.2, Docker Desktop 4.86.0, or Sandboxes 0.38.0 or later.

GBHackersSep 30, 12:42 UTC · 8d agoVulnerability CVE-2026-171061

Imperva

Timeline3 articles

Related CVEsby mentions

Appears with

Top 10 Best API Security Tools in 2026 [Ranked & Scored]

CopyEscape Docker Flaw Lets Malicious Containers Overwrite Host Files and Gain Root Access

Docker CopyEscape CVE-2026-17106 Lets Malicious Containers Overwrite Host Files