CVE-2026-105445None▾ SunlitAn Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a personal access token (PAT) they controlled to another Docker Hub user without rot…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a personal access token (PAT) they controlled to another Docker Hub user without rotating or revoking the token secret. The unchanged PAT then authenticated to the registry as the recipient and could pull, push, or delete images, within its scopes, in repositories accessible to that user, including organization repositories.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-102851Medium· 6.1Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally.
CVE-2026-109605High· 7.3A security vulnerability has been detected in SourceCodester Simple Cafe Billing System 1.0
CVE-2026-109520High· 8.8A flaw has been found in Colorful iGameCenter 2.0.0.82
CVE-2026-12780High· 7.8A vulnerability was determined in AOMEI Backupper up to 8.3.0
CVE-2026-109143Medium· 5.4A vulnerability was determined in calcom cal.com and cal.diy up to 6.2.0
CVE-2025-15126Low· 3.1A weakness has been identified in JeecgBoot up to 3.9.0