Cloudflare Fixes Flaw That Let One Container Read Another Customer's Leftover Disk Data

2026-09-25T07:24:00Z•99af15ebf21ba0eb4f050fec153bf580ec958ca44f4228d2038d1c082db906bf
CVE-2026-5430CVE-2026-67279CVE-2026-80521CVE-2026-85046CVE-2026-85880CVE-2026-86060CVE-2026-87491CVE-2026-87902CVE-2026-94127AI securityAndroidChromeClickFixF5 BIG-IPGitLabLinuxMicrosoft 365MikroTik RouterOSPyPITerraformWindowsWordPressactive exploitationcloud securitycontainer escapecredential theftinformation stealermalwarenpmprivilege escalationremote code executionsupply-chain compromisezero-day

What happened

The document is a threat-intelligence news feed covering active exploitation, zero-days, critical vulnerabilities, malware campaigns, supply-chain compromises, credential abuse, and security risks involving AI agents and developer tooling. Notable items include actively exploited WordPress, F5 BIG-IP, MikroTik, Chrome/Windows, WSO2, and Adobe Commerce flaws; container and cloud data-isolation issues; Android root and spyware campaigns; malicious Terraform, npm, and PyPI packages; ClickFix social engineering; and attacks against Microsoft 365 and GitLab workflows.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
the_hacker_news
Record identifier
99af15ebf21ba0eb4f050fec153bf580ec958ca44f4228d2038d1c082db906bf
Enrichment time
2026-09-25T07:24:00Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

Record · Cloudflare Fixes Flaw That Let One Container Read Another Customer's Leftover Disk Data · Baitaphish