TI-2026-27326 CVE-2026-35172 · GHSA-f2g3-hh2r-cwgc
Distribution has stale blob access resurrection via repo-scoped redis descriptor cache invalidation
Priority HIGH 72
Distribution is a toolkit to pack, ship, store, and deliver container content.
distribution
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
distribution records in CISA KEVNo distribution vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2026-25933 CVE-2026-33540 · GHSA-3p65-76g6-3w7r
Distribution affected by pull-through cache credential exfiltration via www-authenticate bearer realm
Priority HIGH 72
Distribution is a toolkit to pack, ship, store, and deliver container content.
TI-2025-18656 CVE-2025-24976
Distribution's token authentication allows attacker to inject an untrusted signing key in a JWT
Priority HIGH 68
Distribution is a toolkit to pack, ship, store, and deliver container content.
TI-2026-30291 CVE-2026-41888 · GHSA-6pjf-3r9x-m592
Distribution: Tag deletion bypasses `storage.delete.enabled` configuration
Priority HIGH 67
Distribution is a toolkit to pack, ship, store, and deliver container content.
TI-2026-71920 CVE-2026-85747 · GHSA-685w-q87j-wqw3
Distribution client does not verify manifest content against digest
Priority MEDIUM 63
Distribution is a toolkit to pack, ship, store, and deliver container content.