GCVE-110-BRLY-2026-016

BRLY-2026-016 Critical BINARLY REsearch team identified an exposed JFrog Artifactory reference token embedded in container images hosted on Docker Hub under the `ciscosecurity` namespace. The token is configured as an HTTP Basic authentication credential for a private PyPI registry. An attacker with access to a valid token could download proprietary Python packages from Cisco's internal XDR data pipeline registry, and potentially upload malicious packages to conduct a supply chain attack against Cisco's XDR platform.