SEC.co
Emergency

By weakness (CWE)

CWE-265: related vulnerabilities

CVEs classified under CWE-265. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

1 published vulnerability

Known exploited (KEV)CriticalHighMediumAll recent
  • CVE-2026-14784MEDIUM 6.3

    A vulnerability in vxcontrol PentAGI versions up to 2.1.0 allows authenticated users to bypass sandbox restrictions through improper Docker API handling. The flaw exists in the backend Docker client code and enables an attacker with valid credentials to potentially access or modify data outside intended security boundaries. Since the vulnerability requires prior authentication and does not yield remote code execution, the risk is constrained to insider threats or compromised account scenarios.