Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Users who connect to malicious registries with hostnames matching the bypass patterns will have their registry credentials exposed in plaintext. This issue is fixed in container version 0.12.3.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-28909 Users who connect to malicious registries with hostnames matching the bypass patterns will have their registry credentials exposed in plaintext. This issue is fixed i… https://www.cve.org/CVERecord?id=CVE-2026-28909
Post summary
The post describes that connecting to malicious registries can expose credentials in plaintext, and notes that the vulnerability (CVE‑2026‑28909) has been fixed.
🚨*CVE* CVE-2026-28909 Users who connect to malicious registries with hostnames matching the bypass patterns will have their registry credentials exposed in plaintext. This issue is fixed i… https://www.cve.org/CVERecord?id=CVE-2026-28909 ----- Traducción: CVE-2026-28909 Los… http://infoflow.cloud`
Post summary
CVE‑2026‑28909 enables plaintext exposure of registry credentials when accessing malicious registries with certain hostnames; the issue is reported as fixed, with no known exploits or active attacks.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | apple | container | - | swift | - |