CVE-2026-103433
Bake filesystem entitlement consent is skipped for certain secret and oci-layout definitions
CVSS score
6.9
EPSS probability
%0.3
Risk score
0.0
Published
13 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
8.7
CVE-2026-102489 Actively exploitedUndisclosed RCE in Zammad v6.3 and higher
Workaround Public Exploits:3EPSS %1
8.0
CVE-2025-15558Vulnerability in Microsoft Windows
Patch verifiedEPSS %0
6.8
CVE-2026-33997Moby: Off-by-one error in plugin privilege validation
Patch status unknownEPSS %1
7.1
CVE-2026-17106Tar extraction in moby/go-archive can write outside the destination directory via link following
Patch verified Public Exploits:3EPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-103433"