Skip to content
OpenAdvisories

Archive

22 August 2026

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 7.4
    CVE-2026-78122 Public exploit

    docker-socket-proxy through 0.5.0 Insufficient Access Control Granularity Exposes Container Filesystems

    docker-socket-proxy fails to properly gate read endpoints in the /containers Docker API namespace when the CONTAINERS environment variable is set. Attackers can use GET requests to /containers/{id}/archive, /containers/{id}/export, /containers/{id}/logs, and …

  • High 8.6
    CVE-2026-66917 Public exploit

    Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery < 4.4.0

    Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery < 4.4.0 - An authenticated, privileged can store an XSS payload in any image causing JS execution in every visitor's browser.