{"schema_version":1,"title":"Containers vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 10 vulnerabilities in Containers: 0 in the last 7 days and 5 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-88265, was published on 10 September 2026. 2 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/containers","json_url":"https://junglewise.ai/threats/vendors/containers.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/containers","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":4,"all_time":10,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":3,"last_90_days":5,"last_365_days":8},"latest":[{"cve":"CVE-2026-88265","cvss":5.6,"epss":0.0015,"slug":"cve-2026-88265-crun-symlink-following-in-dev-null-leads-to-host-file-access","title":"crun symlink following in /dev/null leads to host file access","severity":"medium","exploited":false,"published_at":"2026-09-10T09:17:03.523+00:00","url":"https://junglewise.ai/threats/cve-2026-88265-crun-symlink-following-in-dev-null-leads-to-host-file-access"},{"cve":"CVE-2026-88264","cvss":5.6,"epss":0.0015,"slug":"cve-2026-88264-crun-terminal-setup-path-redirection-vulnerability","title":"crun terminal setup path redirection vulnerability","severity":"medium","exploited":false,"published_at":"2026-09-10T09:17:03.397+00:00","url":"https://junglewise.ai/threats/cve-2026-88264-crun-terminal-setup-path-redirection-vulnerability"},{"cve":"CVE-2026-84042","cvss":7.8,"epss":0.0014,"slug":"cve-2026-84042-crun-privilege-escalation-in-libkrun-with-passt-networking","title":"crun privilege escalation in libkrun with passt networking","severity":"high","exploited":false,"published_at":"2026-09-10T09:17:03.26+00:00","url":"https://junglewise.ai/threats/cve-2026-84042-crun-privilege-escalation-in-libkrun-with-passt-networking"},{"cve":"CVE-2026-44517","cvss":6.3,"epss":0.0018,"slug":"cve-2026-44517-containers-buildah-path-traversal-in-build-context-processing","title":"Buildah is a tool that facilitates building OCI images. From 1.38.1 until 1.43.2 and 1.44.0, TempDirForURL in define/types.go does not secur","severity":"medium","exploited":false,"published_at":"2026-08-21T21:16:59.25+00:00","url":"https://junglewise.ai/threats/cve-2026-44517-containers-buildah-path-traversal-in-build-context-processing"},{"cve":"CVE-2026-52791","cvss":2,"slug":"cve-2026-52791-containers-fuse-overlayfs-suid-bit-preservation-on-truncate","title":"containers fuse-overlayfs SUID bit preservation on truncate","severity":"info","exploited":false,"published_at":"2026-07-29T17:16:52.187+00:00","url":"https://junglewise.ai/threats/cve-2026-52791-containers-fuse-overlayfs-suid-bit-preservation-on-truncate"},{"cve":"CVE-2026-55686","cvss":5.3,"slug":"cve-2026-55686-podman-symlink-traversal-in-workdir-path-resolution","title":"Podman symlink traversal in WORKDIR path resolution","severity":"medium","exploited":false,"published_at":"2026-06-26T17:16:34.33+00:00","url":"https://junglewise.ai/threats/cve-2026-55686-podman-symlink-traversal-in-workdir-path-resolution"},{"cve":"CVE-2026-33414","cvss":7.8,"epss":0.0051,"slug":"cve-2026-33414-podman-command-injection-in-hyperv-machine-backend","title":"Podman command injection in HyperV machine backend","severity":"high","exploited":false,"published_at":"2026-04-14T23:16:27.987+00:00","url":"https://junglewise.ai/threats/cve-2026-33414-podman-command-injection-in-hyperv-machine-backend"},{"cve":"CVE-2026-35406","cvss":7.5,"epss":0.0038,"slug":"cve-2026-35406-containers-aardvark-dns-infinite-loop-via-malformed-tcp-dns-query","title":"Containers Aardvark-dns infinite loop via malformed TCP DNS query","severity":"high","exploited":false,"published_at":"2026-04-07T22:16:23.277+00:00","url":"https://junglewise.ai/threats/cve-2026-35406-containers-aardvark-dns-infinite-loop-via-malformed-tcp-dns-query"},{"cve":"CVE-2025-9566","cvss":8.1,"epss":0.0006,"slug":"cve-2025-9566-podman-path-traversal-host-file-overwrite-in-kube-play","title":"Podman path traversal host file overwrite in kube play","severity":"high","exploited":false,"published_at":"2025-09-05T20:15:36.727+00:00","url":"https://junglewise.ai/threats/cve-2025-9566-podman-path-traversal-host-file-overwrite-in-kube-play"},{"cve":"CVE-2024-9675","cvss":4.4,"epss":0.0039,"slug":"cve-2024-9675-containers-buildah-path-traversal-in-cache-mounts","title":"containers Buildah path traversal in cache mounts","severity":"medium","exploited":false,"published_at":"2024-10-09T15:32:21+00:00","url":"https://junglewise.ai/threats/cve-2024-9675-containers-buildah-path-traversal-in-cache-mounts"}],"vendor":{"hub":true,"name":"Containers","slug":"containers","homepage":"https://github.com/containers","description":"Containers is an open-source organization focused on providing tools for container image management and execution.","url":"https://junglewise.ai/threats/vendors/containers"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2025-9566","cvss":8.1,"epss":0.0006,"slug":"cve-2025-9566-podman-path-traversal-host-file-overwrite-in-kube-play","title":"Podman path traversal host file overwrite in kube play","severity":"high","exploited":false,"published_at":"2025-09-05T20:15:36.727+00:00","url":"https://junglewise.ai/threats/cve-2025-9566-podman-path-traversal-host-file-overwrite-in-kube-play"},{"cve":"CVE-2026-33414","cvss":7.8,"epss":0.0051,"slug":"cve-2026-33414-podman-command-injection-in-hyperv-machine-backend","title":"Podman command injection in HyperV machine backend","severity":"high","exploited":false,"published_at":"2026-04-14T23:16:27.987+00:00","url":"https://junglewise.ai/threats/cve-2026-33414-podman-command-injection-in-hyperv-machine-backend"},{"cve":"CVE-2026-84042","cvss":7.8,"epss":0.0014,"slug":"cve-2026-84042-crun-privilege-escalation-in-libkrun-with-passt-networking","title":"crun privilege escalation in libkrun with passt networking","severity":"high","exploited":false,"published_at":"2026-09-10T09:17:03.26+00:00","url":"https://junglewise.ai/threats/cve-2026-84042-crun-privilege-escalation-in-libkrun-with-passt-networking"},{"cve":"CVE-2026-35406","cvss":7.5,"epss":0.0038,"slug":"cve-2026-35406-containers-aardvark-dns-infinite-loop-via-malformed-tcp-dns-query","title":"Containers Aardvark-dns infinite loop via malformed TCP DNS query","severity":"high","exploited":false,"published_at":"2026-04-07T22:16:23.277+00:00","url":"https://junglewise.ai/threats/cve-2026-35406-containers-aardvark-dns-infinite-loop-via-malformed-tcp-dns-query"},{"cve":"CVE-2026-44517","cvss":6.3,"epss":0.0018,"slug":"cve-2026-44517-containers-buildah-path-traversal-in-build-context-processing","title":"Buildah is a tool that facilitates building OCI images. From 1.38.1 until 1.43.2 and 1.44.0, TempDirForURL in define/types.go does not secur","severity":"medium","exploited":false,"published_at":"2026-08-21T21:16:59.25+00:00","url":"https://junglewise.ai/threats/cve-2026-44517-containers-buildah-path-traversal-in-build-context-processing"},{"cve":"CVE-2026-88265","cvss":5.6,"epss":0.0015,"slug":"cve-2026-88265-crun-symlink-following-in-dev-null-leads-to-host-file-access","title":"crun symlink following in /dev/null leads to host file access","severity":"medium","exploited":false,"published_at":"2026-09-10T09:17:03.523+00:00","url":"https://junglewise.ai/threats/cve-2026-88265-crun-symlink-following-in-dev-null-leads-to-host-file-access"},{"cve":"CVE-2026-88264","cvss":5.6,"epss":0.0015,"slug":"cve-2026-88264-crun-terminal-setup-path-redirection-vulnerability","title":"crun terminal setup path redirection vulnerability","severity":"medium","exploited":false,"published_at":"2026-09-10T09:17:03.397+00:00","url":"https://junglewise.ai/threats/cve-2026-88264-crun-terminal-setup-path-redirection-vulnerability"},{"cve":"CVE-2026-55686","cvss":5.3,"slug":"cve-2026-55686-podman-symlink-traversal-in-workdir-path-resolution","title":"Podman symlink traversal in WORKDIR path resolution","severity":"medium","exploited":false,"published_at":"2026-06-26T17:16:34.33+00:00","url":"https://junglewise.ai/threats/cve-2026-55686-podman-symlink-traversal-in-workdir-path-resolution"},{"cve":"CVE-2024-9675","cvss":4.4,"epss":0.0039,"slug":"cve-2024-9675-containers-buildah-path-traversal-in-cache-mounts","title":"containers Buildah path traversal in cache mounts","severity":"medium","exploited":false,"published_at":"2024-10-09T15:32:21+00:00","url":"https://junglewise.ai/threats/cve-2024-9675-containers-buildah-path-traversal-in-cache-mounts"},{"cve":"CVE-2026-52791","cvss":2,"slug":"cve-2026-52791-containers-fuse-overlayfs-suid-bit-preservation-on-truncate","title":"containers fuse-overlayfs SUID bit preservation on truncate","severity":"info","exploited":false,"published_at":"2026-07-29T17:16:52.187+00:00","url":"https://junglewise.ai/threats/cve-2026-52791-containers-fuse-overlayfs-suid-bit-preservation-on-truncate"}],"generated_at":"2026-09-26T09:11:00.170868+00:00","technologies":[{"name":"Containers Podman","slug":"podman","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/podman"},{"name":"Containers Crun","slug":"crun","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/crun"}]}