CVE ID :CVE-2026-112264 Published : 19 października 2026 13:55 | 9 minut ago Description :BentoML through 1.4.39 contains a Dockerfile instruction injection vulnerability that allows attackers to add arbitrary build instructions by embedding newlines in docker.env mapping keys rendered by the...

#Sicherheitslücke #Cloud

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-112264 - BentoML through 1.4.39 Dockerfile Instruction Injection via docker.env Keys

VERWANDTEARTIKEL

CVE-2026-112265 - LangBot through 4.11.0 Missing Lark/Feishu Webhook Authenticity Verification

CVE-2026-112266 - SGLang through 0.5.22 Cross-Request Abort via rid Prefix Matching

CVE-2026-112263 - Television 0.15.0 through 0.15.9 OS Command Injection via External Action Formatting

CVE-2026-111915 - Yank Note before 3.93.1 Path Traversal via /api/help Endpoint

F5 releases out-of-band patches for critical NGINX vulnerabilities

Hackers Exploit SiteGuard WAF Vulnerability That Could Give Them Full Control of Servers