{"id":"CVE-2026-15801","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-15801","generatedAt":"2026-10-28T01:19:24.457Z","title":"A vulnerability was found in CRI-O related to the container checkpoint and restore feature.","description":"A vulnerability was found in CRI-O related to the container checkpoint and restore feature. When CRI-O is configured to restore containers from checkpoint archives, insufficient validation of restore metadata may allow a user with sufficient privileges to perform unintended operations on the host filesystem. Successful exploitation requires that container checkpoint and restore functionality is enabled, which is not the default configuration. An attacker must also be able to trigger restoration of a container from untrusted checkpoint content.","published":"2026-09-21T09:17:06.000Z","lastModified":"2026-09-22T19:37:37.000Z","status":"Awaiting Analysis","sourceIdentifier":"secalert@redhat.com","cvss":{"version":"3.1","score":8,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H"},"cwe":["CWE-22"],"affected":[],"epss":{"score":0.00479,"percentile":0.41081,"date":"2026-10-26","history":[{"date":"2026-09-21","score":0.00314,"percentile":0.24437}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.48%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[{"kind":"new","label":"New CVE","at":"2026-09-21T09:17:06.000Z","detail":{"score":"8.0","severity":"HIGH","publishedAt":"2026-09-21T09:17:05.743Z"},"summary":"New CVE, high severity (CVSS 8.0)."}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-15801","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2500823","source":"secalert@redhat.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-15801","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}