PT-2026-36209 · Unknown · Containers

Hackerman70000 · Published 2026-04-30 · Updated 2026-04-30 · CVE-2026-28909

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions container versions prior to 0.12.3

Description Users who connect to malicious registries with hostnames matching the bypass patterns will have their registry credentials exposed in plaintext.

Recommendations Update to version 0.12.3.

Related Identifiers

CVE-2026-28909

Affected Products

Containers

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-28909 · Security Note
• https://github.com/apple/container/security/advisories/GHSA-m5rp-xcpf-r8m7 · Note
• https://twitter.com/CVEnew/status/2049984034244276571 · Twitter Post
• https://twitter.com/infoflowcloud/status/2049984837436551503 · Twitter Post