{"vulnerability": "CVE-2026-34040", "sightings": [{"uuid": "80e8024f-2882-446f-9496-6a7f7bc534c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3midluwgn2q2j", "content": "", "creation_timestamp": "2026-03-31T06:56:01.410290Z"}, {"uuid": "294fff41-7d0e-44d7-9bae-cb05caf7e17d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3midc5qg6yb2s", "content": "", "creation_timestamp": "2026-03-31T04:02:00.249172Z"}, {"uuid": "c0a2f452-37a5-457a-922f-6173d74817fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mimdiymmzx2v", "content": "", "creation_timestamp": "2026-04-03T18:20:09.113222Z"}, {"uuid": "f94bb77b-60d6-45ac-9a02-3168424bef5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mimdj23et52e", "content": "", "creation_timestamp": "2026-04-03T18:20:10.407316Z"}, {"uuid": "8a74c64e-407b-4d8b-98ab-21eacb7a2108", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3miw5lueeoy2k", "content": "", "creation_timestamp": "2026-04-07T16:01:00.473073Z"}, {"uuid": "f9a2fd4e-2967-4eb9-bfba-2acef1c8fe69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3miw5wpj3x42e", "content": "", "creation_timestamp": "2026-04-07T16:07:10.898980Z"}, {"uuid": "15d8208c-081e-4fa8-91dc-94b8d23cdc85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://thehackernews.com/2026/04/docker-cve-2026-34040-lets-attackers.html", "content": "", "creation_timestamp": "2026-04-07T13:15:00.000000Z"}, {"uuid": "2064a059-c33f-4e88-b6a6-f64d5db5300a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mix3qhv2pk2i", "content": "", "creation_timestamp": "2026-04-08T01:00:28.455464Z"}, {"uuid": "b0d3fe7d-eabe-4de2-9310-d1db01fae63a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mixuecgxau2w", "content": "", "creation_timestamp": "2026-04-08T08:21:01.953740Z"}, {"uuid": "752f9ba8-7da0-4f2f-aac3-4026f1f886c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mixz27zo6s2q", "content": "", "creation_timestamp": "2026-04-08T09:44:53.519802Z"}, {"uuid": "efb42818-a5a2-43ad-91cb-45f03f9f9917", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://bsky.app/profile/reconbee.bsky.social/post/3miydg2eros23", "content": "", "creation_timestamp": "2026-04-08T12:50:32.050853Z"}, {"uuid": "2b5c6988-8834-40c5-aafc-7757a8934ca3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3miygocir3s2j", "content": "", "creation_timestamp": "2026-04-08T13:48:46.377883Z"}, {"uuid": "73101bcd-b156-4196-ab11-acf8440148c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3miygociyvs2j", "content": "", "creation_timestamp": "2026-04-08T13:48:46.898746Z"}, {"uuid": "282cc399-895c-44a0-868d-74fe6d239d5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3miygocizv22j", "content": "", "creation_timestamp": "2026-04-08T13:48:47.404870Z"}, {"uuid": "7ebf5d1e-ba5b-4525-b21e-4d127cd37e71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3miygocj4ss2j", "content": "", "creation_timestamp": "2026-04-08T13:48:47.912688Z"}, {"uuid": "e9749edf-34be-4696-a451-e5fe567df3f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3miygocj4st2j", "content": "", "creation_timestamp": "2026-04-08T13:48:48.464458Z"}, {"uuid": "528b8c57-f709-470f-baf9-1093507ae6aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3miygocj5s32j", "content": "", "creation_timestamp": "2026-04-08T13:48:49.074900Z"}, {"uuid": "1bcc0e91-f2d6-414e-b9f8-b5b18e5da06d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3miygocj6rd2j", "content": "", "creation_timestamp": "2026-04-08T13:48:49.575479Z"}, {"uuid": "12613856-b13e-4942-9e62-038cf11467d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3miygocj6re2j", "content": "", "creation_timestamp": "2026-04-08T13:48:50.063593Z"}, {"uuid": "dd963eb0-f1cd-471b-ae10-385a19552d82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3miygocj7qm2j", "content": "", "creation_timestamp": "2026-04-08T13:48:50.581250Z"}, {"uuid": "6f2966db-a880-4379-b7d0-66b9f6f686a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3miym4bydla24", "content": "", "creation_timestamp": "2026-04-08T15:26:05.494098Z"}, {"uuid": "4ca0ee74-8ae1-445e-b2b1-f2b89cd48561", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-34040", "type": "seen", "source": "https://bsky.app/profile/hexonbot.bsky.social/post/3miyt2pnzbh2u", "content": "", "creation_timestamp": "2026-04-08T17:30:26.231107Z"}, {"uuid": "85e7bd53-0785-4015-8724-d6d05f28259d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://bsky.app/profile/newsgroup.social.vir.group.ap.brid.gy/post/3miyvawdipoa2", "content": "", "creation_timestamp": "2026-04-08T18:09:46.028303Z"}, {"uuid": "b5cec536-0f97-44de-bc60-0bbe3e10805e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-34040", "type": "seen", "source": "https://bsky.app/profile/newsgroup-site.bsky.social/post/3miyvctnhzu2p", "content": "", "creation_timestamp": "2026-04-08T18:10:46.590942Z"}, {"uuid": "145b007c-2805-4090-9488-a92f6bc37e0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3miyvdfnnyk2a", "content": "", "creation_timestamp": "2026-04-08T18:11:06.714038Z"}, {"uuid": "8768b7c6-6cfd-48e5-b140-c2f609c39f52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-34040", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3miz6rrzrwz22", "content": "", "creation_timestamp": "2026-04-08T21:00:11.724680Z"}, {"uuid": "e6236771-bffd-40bd-92ec-47aee4903bff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mj3drvgkxm2u", "content": "", "creation_timestamp": "2026-04-09T17:35:03.881478Z"}, {"uuid": "d585c0f9-acdc-4bb0-89b2-5df63863a2b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mj3tkugjec2z", "content": "", "creation_timestamp": "2026-04-09T22:17:30.037767Z"}, {"uuid": "6d9af8f6-e509-406b-b40f-3166194b9ddc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mj3zd2biqt27", "content": "", "creation_timestamp": "2026-04-10T00:00:27.811166Z"}, {"uuid": "59e3884d-048d-4e9f-9931-8a56780a1b33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-34040", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mj4rd3avf2l4", "content": "", "creation_timestamp": "2026-04-10T07:10:06.204749Z"}, {"uuid": "1d260644-7e75-4581-bb95-920cbd06ecdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mj4uvswdgc2b", "content": "", "creation_timestamp": "2026-04-10T08:14:11.732167Z"}, {"uuid": "4095c851-496e-4409-8d2d-829d7f6df6bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://bsky.app/profile/reliableembsys.bsky.social/post/3mj5p527dlx2x", "content": "", "creation_timestamp": "2026-04-10T16:03:29.103397Z"}, {"uuid": "6765ecef-3913-4473-852c-d406b9337790", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mj7zmgilod2s", "content": "", "creation_timestamp": "2026-04-11T14:16:24.959145Z"}, {"uuid": "50c2fba3-be96-4340-a688-54e95111f40b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://bsky.app/profile/librecanada.bsky.social/post/3mjazs76q722z", "content": "", "creation_timestamp": "2026-04-11T23:52:16.590641Z"}, {"uuid": "787a792e-0290-4999-bb6a-c142284e8e41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mjeikswemj2r", "content": "", "creation_timestamp": "2026-04-13T08:54:32.587419Z"}, {"uuid": "beaf556f-627c-43e5-b3e5-380aff7f9ea8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-34040", "type": "seen", "source": "https://bsky.app/profile/adwright.mastodon.social.ap.brid.gy/post/3mjeqsiplrga2", "content": "", "creation_timestamp": "2026-04-13T11:22:10.340125Z"}, {"uuid": "54b85b5f-df9f-4dcd-98ef-952c8e3302b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-34040", "type": "seen", "source": "https://bsky.app/profile/admin.mastodon.ai8w.ddns.net.ap.brid.gy/post/3mjjqgllbmdj2", "content": "", "creation_timestamp": "2026-04-15T10:59:12.666743Z"}, {"uuid": "5346ec3b-45da-42ec-bd3f-896ef706fb5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://bsky.app/profile/feed.igeek.gamer-geek-news.com.ap.brid.gy/post/3mjp3ytrvoqv2", "content": "", "creation_timestamp": "2026-04-17T14:09:04.049447Z"}, {"uuid": "1d3c1bec-ca63-4214-9798-936b4b095ec7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-0bbc86fa-e3cfacd457643f30", "content": "", "creation_timestamp": "2026-04-17T14:38:38.731900Z"}, {"uuid": "be905c52-91e3-4321-ac2b-149ee209cf18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mjp5r2ew4bv2", "content": "", "creation_timestamp": "2026-04-17T14:40:42.465539Z"}, {"uuid": "6aeb82e6-c25b-4aeb-91bf-1d47ba46f827", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-34040", "type": "seen", "source": "https://gist.github.com/cwayne18/10d2b4d69bdb66cbe87a09b1637dc409", "content": "", "creation_timestamp": "2026-04-17T17:34:12.000000Z"}, {"uuid": "5053d923-4129-4f50-9964-5ba8fe17f4df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/8758", "content": "\ud83d\uded1 Docker fixed a flaw letting attackers bypass AuthZ plugins with a padded API request (>1MB).\n\nThe plugin sees no body and allows it, while Docker executes it\u2014creating a privileged container with host access and exposed credentials.\n\n\ud83d\udd17 Learn how this leads to full host compromise \u2192 https://thehackernews.com/2026/04/docker-cve-2026-34040-lets-attackers.html", "creation_timestamp": "2026-04-07T16:35:58.000000Z"}, {"uuid": "9a45947d-46e0-4162-b5a6-9729354609b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/8078", "content": "\u0412 Docker Engine \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f\u00a0\u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u044b \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 (AuthZ).\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-34040 (CVSS: 8,8) \u0438 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u043d\u0435\u043f\u043e\u043b\u043d\u044b\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0434\u0440\u0443\u0433\u043e\u0439 CVE-2024-41110 \u0441 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 \u0442\u043e\u043c \u0436\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u0438\u044e\u043b\u0435 2024 \u0433\u043e\u0434\u0430.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0441\u0430\u043c\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 API-\u0437\u0430\u043f\u0440\u043e\u0441, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0434\u0435\u043c\u043e\u043d Docker \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441 \u043f\u043b\u0430\u0433\u0438\u043d\u0443 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0431\u0435\u0437 \u0442\u0435\u043b\u0430 \u0437\u0430\u043f\u0440\u043e\u0441\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u043d \u043e\u0442\u043a\u043b\u043e\u043d\u0438\u043b \u0431\u044b, \u0435\u0441\u043b\u0438 \u0442\u0435\u043b\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0431\u044b\u043b\u043e \u0435\u043c\u0443 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e.\n\n\u041f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044c \u0432\u0441\u0435\u0445, \u043a\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043f\u043b\u0430\u0433\u0438\u043d\u044b \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438, \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0442\u0435\u043b\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0434\u043b\u044f \u043f\u0440\u0438\u043d\u044f\u0442\u0438\u044f \u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0441\u0440\u0430\u0437\u0443 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c (\u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u0434\u0440\u0443\u0433 \u0434\u0440\u0443\u0433\u0430), \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0410\u0441\u0438\u043c\u0430 \u0412\u0438\u043b\u0430\u0434\u0438 \u041e\u0433\u043b\u0443 \u041c\u0430\u043d\u0438\u0437\u0430\u0434\u0443, \u041a\u043e\u0434\u0438, \u041e\u043b\u0435\u0433\u0430 \u041a\u043e\u043d\u043a\u043e \u0438 \u0412\u043b\u0430\u0434\u0438\u043c\u0438\u0440\u0430 \u0422\u043e\u043a\u0430\u0440\u0435\u0432\u0430. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 Docker Engine 29.3.1.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u0442\u0447\u0435\u0442\u0443 Cyera Research Labs, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f CVE-2024-41110 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043b\u043e \u0441\u043b\u0438\u0448\u043a\u043e\u043c \u0431\u043e\u043b\u044c\u0448\u0438\u0435 \u0442\u0435\u043b\u0430 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u0447\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u043b\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0434\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u043e\u043b\u043d\u0435\u043d\u043d\u043e\u0433\u043e HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0445\u043e\u0441\u0442\u0430.\n\n\u0412 \u0433\u0438\u043f\u043e\u0442\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a API Docker \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u043b\u0430\u0433\u0438\u043d\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u044d\u0442\u043e\u0442 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c, \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u0432 \u0440\u0430\u0437\u043c\u0435\u0440 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u043d\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u0434\u043e \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 1 \u041c\u0411, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0447\u0435\u0433\u043e \u0437\u0430\u043f\u0440\u043e\u0441 \u0431\u0443\u0434\u0435\u0442 \u043e\u0442\u043a\u043b\u043e\u043d\u0435\u043d \u0434\u043e \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0434\u043e\u0441\u0442\u0438\u0433\u043d\u0435\u0442 \u043f\u043b\u0430\u0433\u0438\u043d\u0430.\n\n\u041f\u043b\u0430\u0433\u0438\u043d \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u0442 \u0437\u0430\u043f\u0440\u043e\u0441, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u043d\u0435 \u0432\u0438\u0434\u0438\u0442 \u043d\u0438\u0447\u0435\u0433\u043e, \u0447\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0431\u044b \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c. \u0414\u0435\u043c\u043e\u043d Docker \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0432\u0435\u0441\u044c \u0437\u0430\u043f\u0440\u043e\u0441 \u0438 \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440 \u0441 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0445\u043e\u0441\u0442\u0443: \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c AWS, \u043a\u043b\u044e\u0447\u0430\u043c SSH, \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f\u043c Kubernetes \u0438 \u0432\u0441\u0435\u043c\u0443 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043d\u0430 \u043c\u0430\u0448\u0438\u043d\u0435, \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044f \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u044d\u043a\u043e\u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e, \u0430\u0433\u0435\u043d\u0442 \u0418\u0418 OpenClaw \u0432 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0435 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Docker,\u00a0\u043c\u043e\u0436\u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043c\u0430\u043d\u0443\u0442\u044c \u0438 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u0441\u043a\u0430\u0437\u043a\u0438, \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 GitHub, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043e\u0431\u044b\u0447\u043d\u043e\u0433\u043e \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430.\n\n\u042d\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u0433\u043e CVE-2026-34040 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u0448\u0435 \u043f\u043e\u0434\u0445\u043e\u0434\u0430, \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u0438 \u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0445\u043e\u0441\u0442\u0430.\n\n\u041e\u0431\u043b\u0430\u0434\u0430\u044f \u0442\u0430\u043a\u0438\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0438\u0445 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0437\u0430\u043f\u0438\u0441\u044f\u043c\u0438, \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430\u043c\u0438 Kubernetes \u0438 \u0434\u0430\u0436\u0435 SSH-\u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Cyera \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0430\u0433\u0435\u043d\u0442\u044b \u0418\u0418 \u043c\u043e\u0433\u0443\u0442 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u043d\u043e\u0439 \u043f\u0443\u0442\u044c\u00a0\u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0435\u0433\u043e, \u0444\u043e\u0440\u043c\u0438\u0440\u0443\u044f HTTP-\u0437\u0430\u043f\u0440\u043e\u0441 \u0441 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043b\u0438\u0448\u043d\u0435\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043f\u0440\u0438 \u0432\u043e\u0437\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u0438 \u043e\u0448\u0438\u0431\u043e\u043a \u043f\u0440\u0438 \u043f\u043e\u043f\u044b\u0442\u043a\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0442\u0430\u043a\u0438\u043c \u0444\u0430\u0439\u043b\u0430\u043c, \u043a\u0430\u043a kubeconfig,\u00a0\u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0437\u0430\u0434\u0430\u0447\u0438 \u043e\u0442\u043b\u0430\u0434\u043a\u0438, \u0437\u0430\u0434\u0430\u043d\u043d\u043e\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u043c (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043e\u0442\u043b\u0430\u0434\u043a\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043d\u0435\u0445\u0432\u0430\u0442\u043a\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Kubernetes).\n\n\u0422\u0430\u043a\u043e\u0439 \u043f\u043e\u0434\u0445\u043e\u0434 \u0438\u0441\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0435\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438.\n\n\u041f\u043b\u0430\u0433\u0438\u043d AuthZ \u043e\u0442\u043a\u043b\u043e\u043d\u0438\u043b \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435. \u0410\u0433\u0435\u043d\u0442 \u0438\u043c\u0435\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a API Docker \u0438 \u0437\u043d\u0430\u0435\u0442, \u043a\u0430\u043a \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 HTTP. \u0414\u043b\u044f CVE-2026-34040 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043d\u0438\u043a\u0430\u043a\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442-\u043a\u043e\u0434\u0430, \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438\u043b\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432.\n\n\u042d\u0442\u043e \u0432\u0441\u0435\u0433\u043e \u043b\u0438\u0448\u044c \u043e\u0434\u0438\u043d HTTP-\u0437\u0430\u043f\u0440\u043e\u0441 \u0441 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0437\u0430\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c. \u041b\u044e\u0431\u043e\u0439 \u0430\u0433\u0435\u043d\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u044e API Docker, \u043c\u043e\u0436\u0435\u0442 \u0435\u0433\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u0442\u044c.\n\n\u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0438\u0437\u0431\u0435\u0433\u0430\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u0430\u043d\u0430\u043b\u0438\u0437 \u0442\u0435\u043b\u0430 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0434\u043b\u044f \u043f\u0440\u0438\u043d\u044f\u0442\u0438\u044f \u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a API Docker \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c \u043b\u0438\u0446\u0430\u043c, \u0441\u043b\u0435\u0434\u0443\u044f \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0443 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0438\u043b\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c Docker \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0431\u0435\u0437 \u043f\u0440\u0430\u0432 root.\n\n\u0412 \u044d\u0442\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435 \u0434\u0430\u0436\u0435 \u00abroot\u00bb \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u0441\u043e\u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0441 UID \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0445\u043e\u0441\u0442\u0430. \u0420\u0430\u0434\u0438\u0443\u0441 \u043f\u043e\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0441\u043d\u0438\u0436\u0430\u0435\u0442\u0441\u044f \u0441 \u00ab\u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0445\u043e\u0441\u0442\u0430\u00bb \u0434\u043e \u00ab\u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u00bb.", "creation_timestamp": "2026-04-08T14:40:30.000000Z"}, {"uuid": "27217c22-17e7-448d-82fc-0568ff1a4bfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://t.me/TengkorakCyberCrewzz/39436", "content": "Docker CVE-2026-34040 Lets Attackers Bypass Authorization and Gain Host Access \u2013 thehackernews.com\n\nTue, 07 Apr 2026 23:15:00", "creation_timestamp": "2026-04-07T16:04:33.000000Z"}, {"uuid": "8c78f1e2-d739-4275-889d-ba63e1bb70e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://t.me/ctinow/248412", "content": "Docker CVE-2026-34040 Lets Attackers Bypass Authorization and Gain Host Access\nhttps://ift.tt/ryzkfaF", "creation_timestamp": "2026-04-07T15:59:33.000000Z"}, {"uuid": "1e0bea89-356d-4e25-8a98-0b2674132f6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "published-proof-of-concept", "source": "https://t.me/TengkorakCyberCrewzz/9551", "content": "Docker CVE-2026-34040 Lets Attackers Bypass Authorization and Gain Host Access \u2013 thehackernews.com\n\nTue, 07 Apr 2026 23:15:00", "creation_timestamp": "2026-04-07T16:04:33.000000Z"}, {"uuid": "86188ad7-6831-4766-83b7-c6c95e4709dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "published-proof-of-concept", "source": "Telegram/84MSU-hIhNrWnS8A8cOqhlUxSHC6aqIIGr26pihaT5cA3PI", "content": "", "creation_timestamp": "2026-03-31T05:17:29.000000Z"}, {"uuid": "0a320b47-e3e9-4e0c-9a90-6c64fd160768", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "published-proof-of-concept", "source": "Telegram/9lLaatvFiMQVF0AEPvOPmYn7tDislwZujzoovRE-YVfRWA", "content": "", "creation_timestamp": "2026-04-07T16:37:37.000000Z"}, {"uuid": "52dcb0f3-5c94-4694-bb44-19d3c9a935a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3ml6w2j5p2y2b", "content": "\ud83d\udd17 CVE : CVE-2016-1000027, CVE-2024-12798, CVE-2026-23949, CVE-2026-24049, CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32285, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-34040, CVE-2026-39883", "creation_timestamp": "2026-05-06T14:30:24.153966Z"}, {"uuid": "9c0bce2d-4a20-4ea9-a58a-aa0ccc73ccc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mlbtea75l32g", "content": "This addresses the following vulnerabilities: CVE-2025-58188 CVE-2025-58187 CVE-2026-34040 CVE-2026-33997 CVE-2026-33186 CVE-2026-25679 CVE-2026-24051 CVE-2026-0915 CVE-2026-0861 CVE-2025-68119 CVE-2025-61732 CVE-2025-61731 CVE-2025-61729 CVE-2025-61726 CVE-2025-4674", "creation_timestamp": "2026-05-07T18:20:06.944218Z"}, {"uuid": "311fd42b-338f-47b8-94ba-b2a9bceec2c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://t.me/CyberSecurityExploit/31014", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real GitHub PoC repositories (strictly validated).\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-1668\n\ud83c\udfaf Firmware Exploit \u2013 Memory Corruption \u2192 RCE\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/tangrs/cve-2026-1668-poc\n\n\ud83e\udde0 Overview\nA firmware-level vulnerability enabling memory corruption and potential remote code execution. Active PoC confirms exploit feasibility.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Firmware compromise\n\u2022 Embedded system takeover\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-2441\n\ud83c\udfaf Google Chrome Blink \u2013 Use-After-Free \u2192 RCE\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/huseyinstif/CVE-2026-2441-PoC\n\n\ud83e\udde0 Overview\nA use-after-free vulnerability in Chrome\u2019s Blink engine enables arbitrary code execution inside the renderer via crafted HTML.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Browser exploitation vector\n\u2022 Potential sandbox escape chaining\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-25526\n\ud83c\udfaf Jinjava Template Engine \u2013 SSTI \u2192 RCE\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/av4nth1ka/jinjava-cve-2026-25526-poc\n\n\ud83e\udde0 Overview\nA Server-Side Template Injection vulnerability allowing attackers to execute arbitrary code via crafted template payloads.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Backend compromise\n\u2022 Application takeover\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-26030\n\ud83c\udfaf Microsoft Semantic Kernel \u2013 RCE via Vector Store\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/mbanyamer/CVE-2026-26030-Microsoft-Semantic-Kernel-1.39.4-RCE\n\n\ud83e\udde0 Overview\nA vulnerability in Microsoft Semantic Kernel allows code execution via unsafe vector store handling. Public PoC confirms exploitability.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI / LLM pipeline compromise\n\u2022 Data processing abuse\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-34040\n\ud83c\udfaf Docker Engine \u2013 AuthZ Bypass \u2192 Privileged Container (RCE Chain)\n\n\ud83d\udd17 PoC / Exploit Context\n\u27a1\ufe0f https://github.com/moby/moby/security/advisories/GHSA-x744-4wpc-v9h2\n\n\ud83e\udde0 Overview\nA critical authorization bypass in Docker Engine allows attackers to bypass security plugins by sending oversized HTTP requests. The request body is truncated before validation, enabling malicious container creation with elevated privileges.\n\n\u2699\ufe0f Impact\n\u2022 Authorization bypass\n\u2022 Privileged container creation (root access)\n\u2022 Full host compromise via container escape\n\u2022 CI/CD & cloud infrastructure risk\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Firmware exploitation techniques\n\u2022 Browser memory corruption exploitation\n\u2022 SSTI \u2192 backend RCE chains\n\u2022 AI/LLM framework attack surface\n\u2022 Modern web framework bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Strict PoC validation required (fake links increasing)\n\u2022 Browser & AI-related vulnerabilities rising\n\u2022 RCE chains often start from logic bypass\n\u2022 Real exploit repos are limited but high quality\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T12:00:03.501790Z"}, {"uuid": "a1091766-f6c0-4b12-a383-9bdf075a8193", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://t.me/CyberSecurityExploit/31013", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real GitHub PoC repositories (strictly validated).\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-1668\n\ud83c\udfaf Firmware Exploit \u2013 Memory Corruption \u2192 RCE\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/tangrs/cve-2026-1668-poc\n\n\ud83e\udde0 Overview\nA firmware-level vulnerability enabling memory corruption and potential remote code execution. Active PoC confirms exploit feasibility.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Firmware compromise\n\u2022 Embedded system takeover\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-2441\n\ud83c\udfaf Google Chrome Blink \u2013 Use-After-Free \u2192 RCE\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/huseyinstif/CVE-2026-2441-PoC\n\n\ud83e\udde0 Overview\nA use-after-free vulnerability in Chrome\u2019s Blink engine enables arbitrary code execution inside the renderer via crafted HTML.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Browser exploitation vector\n\u2022 Potential sandbox escape chaining\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-25526\n\ud83c\udfaf Jinjava Template Engine \u2013 SSTI \u2192 RCE\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/av4nth1ka/jinjava-cve-2026-25526-poc\n\n\ud83e\udde0 Overview\nA Server-Side Template Injection vulnerability allowing attackers to execute arbitrary code via crafted template payloads.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Backend compromise\n\u2022 Application takeover\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-26030\n\ud83c\udfaf Microsoft Semantic Kernel \u2013 RCE via Vector Store\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/mbanyamer/CVE-2026-26030-Microsoft-Semantic-Kernel-1.39.4-RCE\n\n\ud83e\udde0 Overview\nA vulnerability in Microsoft Semantic Kernel allows code execution via unsafe vector store handling. Public PoC confirms exploitability.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI / LLM pipeline compromise\n\u2022 Data processing abuse\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-34040\n\ud83c\udfaf Docker Engine \u2013 AuthZ Bypass \u2192 Privileged Container (RCE Chain)\n\n\ud83d\udd17 PoC / Exploit Context\n\u27a1\ufe0f https://github.com/moby/moby/security/advisories/GHSA-x744-4wpc-v9h2\n\n\ud83e\udde0 Overview\nA critical authorization bypass in Docker Engine allows attackers to bypass security plugins by sending oversized HTTP requests. The request body is truncated before validation, enabling malicious container creation with elevated privileges.\n\n\u2699\ufe0f Impact\n\u2022 Authorization bypass\n\u2022 Privileged container creation (root access)\n\u2022 Full host compromise via container escape\n\u2022 CI/CD & cloud infrastructure risk\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Firmware exploitation techniques\n\u2022 Browser memory corruption exploitation\n\u2022 SSTI \u2192 backend RCE chains\n\u2022 AI/LLM framework attack surface\n\u2022 Modern web framework bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Strict PoC validation required (fake links increasing)\n\u2022 Browser & AI-related vulnerabilities rising\n\u2022 RCE chains often start from logic bypass\n\u2022 Real exploit repos are limited but high quality\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T12:00:04.092318Z"}, {"uuid": "a133456c-21c8-4f01-bf3f-e069a3a965c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-34040", "type": "seen", "source": "https://bsky.app/profile/devops-daily.com/post/3mq2un62vyu2p", "content": "\ud83d\udcdd The Docker AuthZ Bypass Is Back: CVE-2026-34040\n\nCVE-2026-34040 lets a crafted API request slip past Docker authorization plugins, and it is an incomplete fix of the 2024 maximum-severity bug. Here...\n\nRead here: https://devops-daily.com/posts/docker-authz-bypass-cve-2026-34040", "creation_timestamp": "2026-07-07T15:00:20.386189Z"}, {"uuid": "490e0cd0-072e-4b2b-ba39-ba5a2287cd34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/31013", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real GitHub PoC repositories (strictly validated).\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-1668\n\ud83c\udfaf Firmware Exploit \u2013 Memory Corruption \u2192 RCE\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/tangrs/cve-2026-1668-poc\n\n\ud83e\udde0 Overview\nA firmware-level vulnerability enabling memory corruption and potential remote code execution. Active PoC confirms exploit feasibility.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Firmware compromise\n\u2022 Embedded system takeover\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-2441\n\ud83c\udfaf Google Chrome Blink \u2013 Use-After-Free \u2192 RCE\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/huseyinstif/CVE-2026-2441-PoC\n\n\ud83e\udde0 Overview\nA use-after-free vulnerability in Chrome\u2019s Blink engine enables arbitrary code execution inside the renderer via crafted HTML.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Browser exploitation vector\n\u2022 Potential sandbox escape chaining\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-25526\n\ud83c\udfaf Jinjava Template Engine \u2013 SSTI \u2192 RCE\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/av4nth1ka/jinjava-cve-2026-25526-poc\n\n\ud83e\udde0 Overview\nA Server-Side Template Injection vulnerability allowing attackers to execute arbitrary code via crafted template payloads.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Backend compromise\n\u2022 Application takeover\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-26030\n\ud83c\udfaf Microsoft Semantic Kernel \u2013 RCE via Vector Store\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/mbanyamer/CVE-2026-26030-Microsoft-Semantic-Kernel-1.39.4-RCE\n\n\ud83e\udde0 Overview\nA vulnerability in Microsoft Semantic Kernel allows code execution via unsafe vector store handling. Public PoC confirms exploitability.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI / LLM pipeline compromise\n\u2022 Data processing abuse\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-34040\n\ud83c\udfaf Docker Engine \u2013 AuthZ Bypass \u2192 Privileged Container (RCE Chain)\n\n\ud83d\udd17 PoC / Exploit Context\n\u27a1\ufe0f https://github.com/moby/moby/security/advisories/GHSA-x744-4wpc-v9h2\n\n\ud83e\udde0 Overview\nA critical authorization bypass in Docker Engine allows attackers to bypass security plugins by sending oversized HTTP requests. The request body is truncated before validation, enabling malicious container creation with elevated privileges.\n\n\u2699\ufe0f Impact\n\u2022 Authorization bypass\n\u2022 Privileged container creation (root access)\n\u2022 Full host compromise via container escape\n\u2022 CI/CD & cloud infrastructure risk\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Firmware exploitation techniques\n\u2022 Browser memory corruption exploitation\n\u2022 SSTI \u2192 backend RCE chains\n\u2022 AI/LLM framework attack surface\n\u2022 Modern web framework bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Strict PoC validation required (fake links increasing)\n\u2022 Browser & AI-related vulnerabilities rising\n\u2022 RCE chains often start from logic bypass\n\u2022 Real exploit repos are limited but high quality\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:25.230216Z"}, {"uuid": "e6f2947f-8139-4e16-8223-2a556f688861", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/31014", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real GitHub PoC repositories (strictly validated).\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-1668\n\ud83c\udfaf Firmware Exploit \u2013 Memory Corruption \u2192 RCE\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/tangrs/cve-2026-1668-poc\n\n\ud83e\udde0 Overview\nA firmware-level vulnerability enabling memory corruption and potential remote code execution. Active PoC confirms exploit feasibility.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Firmware compromise\n\u2022 Embedded system takeover\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-2441\n\ud83c\udfaf Google Chrome Blink \u2013 Use-After-Free \u2192 RCE\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/huseyinstif/CVE-2026-2441-PoC\n\n\ud83e\udde0 Overview\nA use-after-free vulnerability in Chrome\u2019s Blink engine enables arbitrary code execution inside the renderer via crafted HTML.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Browser exploitation vector\n\u2022 Potential sandbox escape chaining\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-25526\n\ud83c\udfaf Jinjava Template Engine \u2013 SSTI \u2192 RCE\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/av4nth1ka/jinjava-cve-2026-25526-poc\n\n\ud83e\udde0 Overview\nA Server-Side Template Injection vulnerability allowing attackers to execute arbitrary code via crafted template payloads.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Backend compromise\n\u2022 Application takeover\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-26030\n\ud83c\udfaf Microsoft Semantic Kernel \u2013 RCE via Vector Store\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/mbanyamer/CVE-2026-26030-Microsoft-Semantic-Kernel-1.39.4-RCE\n\n\ud83e\udde0 Overview\nA vulnerability in Microsoft Semantic Kernel allows code execution via unsafe vector store handling. Public PoC confirms exploitability.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI / LLM pipeline compromise\n\u2022 Data processing abuse\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-34040\n\ud83c\udfaf Docker Engine \u2013 AuthZ Bypass \u2192 Privileged Container (RCE Chain)\n\n\ud83d\udd17 PoC / Exploit Context\n\u27a1\ufe0f https://github.com/moby/moby/security/advisories/GHSA-x744-4wpc-v9h2\n\n\ud83e\udde0 Overview\nA critical authorization bypass in Docker Engine allows attackers to bypass security plugins by sending oversized HTTP requests. The request body is truncated before validation, enabling malicious container creation with elevated privileges.\n\n\u2699\ufe0f Impact\n\u2022 Authorization bypass\n\u2022 Privileged container creation (root access)\n\u2022 Full host compromise via container escape\n\u2022 CI/CD & cloud infrastructure risk\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Firmware exploitation techniques\n\u2022 Browser memory corruption exploitation\n\u2022 SSTI \u2192 backend RCE chains\n\u2022 AI/LLM framework attack surface\n\u2022 Modern web framework bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Strict PoC validation required (fake links increasing)\n\u2022 Browser & AI-related vulnerabilities rising\n\u2022 RCE chains often start from logic bypass\n\u2022 Real exploit repos are limited but high quality\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:25.504539Z"}, {"uuid": "10c1a6a4-26f4-443f-9151-c0a7865eab43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87714", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-34040-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a m0nk3ygod\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-07 11:58:23\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-12T12:00:05.049955Z"}, {"uuid": "a68ead9a-8d33-4722-9526-e91b7fc60661", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87714", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-34040-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a m0nk3ygod\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-07 11:58:23\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T00:00:44.863101Z"}, {"uuid": "e7313ab1-dd73-4c96-a104-51dadaaf8328", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/20661", "content": "Docker CVE-2026-34040 Lets Attackers Bypass Authorization and Gain Host Access \u2013 thehackernews.com\n\nTue, 07 Apr 2026 23:15:00", "creation_timestamp": "2026-07-19T16:00:06.030832Z"}, {"uuid": "4791f5ef-b979-4132-9200-fd08a1cf43cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34040", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/20661", "content": "Docker CVE-2026-34040 Lets Attackers Bypass Authorization and Gain Host Access \u2013 thehackernews.com\n\nTue, 07 Apr 2026 23:15:00", "creation_timestamp": "2026-07-20T00:00:21.284880Z"}]}