cybercrime.clubhttps://cybercrime.club/tags/authz/Infrastructure security news for people who build infrastructure.Hugo -- gohugo.ioen-usTue, 07 Apr 2026 18:09:22 -0400Docker AuthZ Bypass Returns: CVE-2026-34040 Lets Attackers Create Privileged Containers With a Single Padded Requesthttps://cybercrime.club/posts/docker-cve-2026-34040-authz-bypass-host-takeover/Tue, 07 Apr 2026 18:09:22 -0400https://cybercrime.club/posts/docker-cve-2026-34040-authz-bypass-host-takeover/An incomplete fix for a 2024 Docker AuthZ bypass has resurfaced as CVE-2026-34040, allowing unauthenticated container creation with host filesystem access via oversized HTTP requests.vulnerabilities