Docker - Tool

Related Threat Clusters

• Critical RCE Vulnerability in n8n Affects Over 100K Servers

  A critical remote code execution vulnerability (CVE-2025-68613) in the n8n workflow automation platform has been disclosed, potentially impacting over 100,000 servers, primarily in the United States. The flaw, which has…

  4 articles · Updated December 24, 2025
• Critical NGINX UI Vulnerability CVE-2026-33032 Under Active Exploitation

  A critical vulnerability in the nginx-ui web server management tool, tracked as CVE-2026-33032, has been actively exploited since March 2026. This flaw allows attackers to bypass authentication on the /mcp_message…

  22 articles · Updated April 15, 2026
• Malware Spread via Fake Polymarket Trading Bot Targets DeFi Developers

  On July 1, 2026, security firm SlowMist identified a fake trading bot on GitHub designed to spread malware targeting Polymarket users and DeFi developers. The bot, named 'polymarket-arbitrage-bot', was promoted as a…

  2 articles · Updated July 1, 2026
• TeamPCP's CanisterWorm Targets Iranian Systems with Destructive Kubernetes Wiper

  TeamPCP has launched a new cyber campaign deploying a destructive payload that targets Kubernetes clusters configured for Iran. This wiper malware, part of the ongoing CanisterWorm campaign, uses the same…

  4 articles · Updated March 23, 2026
• Critical Remote Code Execution Flaw Discovered in Flowise MCP Server

  Flowise has disclosed a critical remote code execution vulnerability, tracked as CVE-2026-56274, affecting versions prior to 3.1.2 of its Custom MCP Server feature. The flaw allows attackers to exploit multiple OS…

  2 articles · Updated June 23, 2026
• Critical CVE-2025-34291 in Langflow AI Agent Under Active Exploitation

  CVE-2025-34291 is a critical vulnerability affecting Langflow, an open-source AI agent platform, allowing attackers to take over accounts and execute arbitrary code. Disclosed on December 5, 2025, this vulnerability has…

  47 articles · Updated May 30, 2026
• Fedora Skopeo Security Fix for CVE-2025-58189 and CVE-2025-61725

  Fedora has released security updates for the Skopeo command line utility addressing critical vulnerabilities CVE-2025-58189 and CVE-2025-61725. The updates were made available for Fedora 42 and Fedora 43, with the…

  2 articles · Updated November 13, 2025
• Exploitation of Remote Services in Cyber Attacks

  Adversaries are increasingly leveraging external remote services like VPNs and Citrix to gain unauthorized access to networks. These attacks often involve using valid accounts obtained through credential harvesting or…

  2 articles · Updated June 3, 2026
• TeamPCP Compromises Microsoft DurableTask and GitHub Actions in Supply Chain Attack

  The TeamPCP threat group has expanded its supply chain attack campaign, compromising the Microsoft DurableTask Python client with versions v1.4.1, v1.4.2, and v1.4.3 found to contain a credential-stealing worm. This…

  11 articles · Updated May 20, 2026
• Anonymous Researcher Publishes Zero-Day Exploits for Major Software Projects

  An anonymous researcher known as Bikini has released exploit code for over a dozen zero-day vulnerabilities affecting 15 popular open-source projects, including the Linux kernel and Libssh2. The exploits were disclosed…

  4 articles · Updated July 1, 2026

Recent Intelligence Reports

• Jadepuffer Agentic Ransomware For Automated Database Extortion — www.sysdig.com · July 16, 2026
• CVE-2026-56260: Crawl4AI - Arbitrary File Write via output_path Parameter [CRITICAL] CVSS 9.1 Exploit Intelligence — Recent CVEs / 14h Crawl4AI before 0.8.7 contains an arbitrary file write vulnerability in the Docker API server's /screenshot and /pdf endpoints. The output_path parameter accepts arbitrary filesystem paths without validation, allowing an attacker to supply absolute or path-traversal values to write to any location w — exploit-intel.com · July 13, 2026
• Critical Arbitrary File Write Vulnerability in Crawl4AI (CVE-2026-56260) ThreatCluster - Threat Intelligence Feed / 7h This flaw exists in the Docker API server's /screenshot and /pdf endpoints, allowing unauthenticated attackers to write arbitrary files to any filesystem location accessible by the application's user. CVE-2026-56260 is a critical arbitrary file write vulnerability affecting Crawl4AI versions prior to 0.8.7. — threatcluster.io · July 13, 2026
• CVE-2026-56260 - Exploits & Severity — Feedly · July 12, 2026
• Public Exploit Turns 15-Year Linux Kernel Flaw Into 5-Second Root Attack — Techtimes · July 8, 2026
• Mondoo Vulnerability Intelligence — mondoo.com · July 8, 2026
• Link — edge.prnewswire.com · July 8, 2026
• Critical Gitea Docker Bug Under Active Exploitation Exposes Repositories and Secrets — Securityaffairs.Co · July 7, 2026

Related Entities