Impacted if
Not known yet — the vendor's record and the NVD are being read.
First seen by AX-NEWS · latest story . Severity: NVD, or the CVE record while the NVD has not scored it. This product uses data from the NVD API but is not endorsed or certified by the NVD.
Coverage
-
Docker Hub flaw let attackers impersonate users, tamper with images
BleepingComputer
Cybersecurity
Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user's container repositories using a personal access token (PAT). [...]
-
Docker Hub security advisory: personal access tokens transferred during account-to-organization conversions
Docker Blog
DevOps & SRE
On September 30, 2026, security researchers reported a vulnerability in Docker Hub’s identity and access management through our Vulnerability Disclosure Program. We confirmed the report and deployed a fix to production the same afternoon…