Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The docker_pull module uses the realm parameter from a Docker registry's WWW-Authenticate response header as the authentication endpoint without validation. An attacker in a man-in-the-middle position between bbot and a Docker registry could modify this header to redirect the authentication request to an arbitrary endpoint, potentially leaking authentication tokens.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-12566 Unvalidated Docker Registry Authentication Redirect via WWW-Authenticate Header in bbot https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-12566
Post summary
The entry references a new vulnerability in bbot related to Docker Registry authentication, but it provides no proof of concept, exploitation evidence, mitigation steps, or detailed technical specifics.