47
42
42
42
42
47
42
Vulnerability Spotlight: Multiple vulnerabilities in phpGACL class
60
47
42
42
42
47
47
Docker Sandboxes Vulnerabilities Let Malicious Guests Escape Workspace and Access Host Filesnew
Docker fixed two symlink-race flaws in Docker Sandboxes, CVE-2026-77179 and CVE-2026-79994, letting malicious guests escape the workspace and read host files; fixed in 0.42.0.
Docker patched CVE-2026-77179 (Critical) and CVE-2026-79994 (High) in Docker Sandboxes 0.42.0, released September 7. Both are time-of-check-to-time-of-use symlink races: CVE-2026-77179 in the macOS virtio-fs host server (versions 0.28.0 to before 0.42.0) can allow a malicious guest to read or modify arbitrary host files and potentially achieve code execution, while CVE-2026-79994 in the guest-to-host Unix socket relay (0.37.0 to before 0.42.0) can redirect host connections to arbitrary AF_UNIX sockets. Docker recommends upgrading and, as interim mitigation, using clone mode and avoiding read-write host mounts.
55
Jenkins Patches 20 Plugin Flaws Leading to RCE, XSS and Credential Theft
Jenkins patched 20 vulnerabilities across 13 plugins, including Groovy sandbox bypasses enabling remote code execution on CI/CD controllers.
Jenkins released security updates on September 16, 2026 for 20 vulnerabilities across 13 plugins, including nine fixes in the Script Security Plugin for Groovy sandbox bypasses. CVE-2026-92127 (classpath abuse) and CVE-2026-92128 (TOCTOU race on remote JAR loading) could allow arbitrary code execution in the controller JVM, exposing build secrets, credentials, and downstream deployment environments. Other flaws include stored XSS in the Warnings, Coverage, OWASP Dependency-Check and Gitee plugins, SSRF in the Gradle and Bitbucket plugins enabling credential capture, credential exposure via CVE-2026-92130, arbitrary file write via CVE-2026-92137, OAuth token theft, and an open redirect in the Keycloak Authentication Plugin. No exploitation is reported; fixes include Script Security Plugin 1422.v06869826dd9b_.
58
57
60
42
42
42
47
42
47
42
42
42
42
42
57
42
57
42
47
47
42
42
42
47
47