Boletines de Vulnerabilidades

CVE-2026-13140

   
Software afectado DOCKER
 
Stored Cross-Site Scripting in the exposed AWS API key store of Thinkst Applied Research Canarytokens.




Anonymous exploitation requires knowledge of a random identifier.




This issue affects Canarytokens: from Docker tag sha-4116b92cb before sha-f5aa5c4e, from Git commit 4116b92cb before f5aa5c4e.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-13140