{"id":"CVE-2026-92543","aliases":["ALPINE-CVE-2026-92543","AZL-107195","AZL-107315","AZL-107333","AZL-107351","AZL-107748","BELL-CVE-2026-92543","DEBIAN-CVE-2026-92543","EUVD-2026-94484","GHSA-7cfq-22r6-qp73","OESA-2026-4657","OESA-2026-4719","OESA-2026-4720","OESA-2026-4858","UBUNTU-CVE-2026-92543"],"status":"published","title":"Docker Engine insecure-registry fallback via malicious DNS responses","description":"Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Because the transport re-dials the hostname rather than the CIDR-matching address, a DNS answer set of one loopback IP plus a non-loopback attacker IP disables certificate verification and enables HTTP fallback for the registry connection.","severity":{"version":"4.0","score":7.6,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00087,"percentile":0.00344,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-295","CWE-319"],"published":"2026-10-01T21:03:02.525929Z","modified":"2026-11-11T12:45:12Z","fixes":[{"ecosystem":"Alpine:v3.24","package":"docker","fixed_in":["29.8.2-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"cert-manager","fixed_in":["1.12.15-15"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"docker-buildx","fixed_in":["0.14.0-19"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"docker-cli","fixed_in":["25.0.7-6"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"docker-compose","fixed_in":["2.27.0-16"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"docker","fixed_in":["29.8.2-r0"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"docker","fixed_in":["engine-18.09.0-355.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"docker","fixed_in":["engine-18.09.0-358.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"docker","fixed_in":["engine-18.09.0-358.oe2403sp3"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP4","package":"docker","fixed_in":["engine-18.09.0-358.oe2403sp4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.24","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"29.8.2-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"cert-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.15-15"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"docker-buildx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.0-19"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"docker-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.7-6"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"docker-compose","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-16"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"moby-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"25.0.18-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24.0.2-r0"},{"fixed":"29.8.2-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"docker.io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["20.10.24+dfsg1-1","20.10.24+dfsg1-1+deb12u1","20.10.25+dfsg1-1","20.10.25+dfsg1-2","20.10.25+dfsg1-3","20.10.25+dfsg1-4","26.1.4+dfsg1-1","26.1.4+dfsg1-2","26.1.4+dfsg1-3","26.1.4+dfsg1-4","26.1.4+dfsg1-5","26.1.4+dfsg1-6","26.1.4+dfsg1-7","26.1.4+dfsg1-8","26.1.4+dfsg1-9","26.1.4+dfsg2-1","26.1.4+dfsg3-1","26.1.5+dfsg1-1","26.1.5+dfsg1-10","26.1.5+dfsg1-2","26.1.5+dfsg1-3","26.1.5+dfsg1-4","26.1.5+dfsg1-5","26.1.5+dfsg1-6","26.1.5+dfsg1-7","26.1.5+dfsg1-8","26.1.5+dfsg1-9","27.5.1+dfsg1-1","27.5.1+dfsg1-2","27.5.1+dfsg2-1","27.5.1+dfsg3-1","27.5.1+dfsg3-2","27.5.1+dfsg3-3","27.5.1+dfsg3-4","27.5.1+dfsg3-5","27.5.1+dfsg3-6","27.5.1+dfsg4-1","27.5.1+dfsg4-2","28.5.2+dfsg1-1","28.5.2+dfsg2-1","28.5.2+dfsg3-1","28.5.2+dfsg3-2","28.5.2+dfsg4-1","28.5.2+dfsg4-2","28.5.2+dfsg4-3","28.5.2+dfsg4-4","28.5.2+dfsg4-5"]},{"source":"osv","ecosystem":"Debian:13","package":"docker.io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["26.1.5+dfsg1-10","26.1.5+dfsg1-9","26.1.5+dfsg1-9+deb13u1","27.5.1+dfsg1-1","27.5.1+dfsg1-2","27.5.1+dfsg2-1","27.5.1+dfsg3-1","27.5.1+dfsg3-2","27.5.1+dfsg3-3","27.5.1+dfsg3-4","27.5.1+dfsg3-5","27.5.1+dfsg3-6","27.5.1+dfsg4-1","27.5.1+dfsg4-2","28.5.2+dfsg1-1","28.5.2+dfsg2-1","28.5.2+dfsg3-1","28.5.2+dfsg3-2","28.5.2+dfsg4-1","28.5.2+dfsg4-2","28.5.2+dfsg4-3","28.5.2+dfsg4-4","28.5.2+dfsg4-5"]},{"source":"osv","ecosystem":"Debian:14","package":"docker.io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["26.1.5+dfsg1-10","26.1.5+dfsg1-9","27.5.1+dfsg1-1","27.5.1+dfsg1-2","27.5.1+dfsg2-1","27.5.1+dfsg3-1","27.5.1+dfsg3-2","27.5.1+dfsg3-3","27.5.1+dfsg3-4","27.5.1+dfsg3-5","27.5.1+dfsg3-6","27.5.1+dfsg4-1","27.5.1+dfsg4-2","28.5.2+dfsg1-1","28.5.2+dfsg2-1","28.5.2+dfsg3-1","28.5.2+dfsg3-2","28.5.2+dfsg4-1","28.5.2+dfsg4-2","28.5.2+dfsg4-3","28.5.2+dfsg4-4","28.5.2+dfsg4-5"]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"engine-18.09.0-355.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"engine-18.09.0-358.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"engine-18.09.0-358.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"engine-18.09.0-358.oe2403sp4"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"docker.io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.6.2~dfsg1-1ubuntu4","1.10.2-0ubuntu3","1.10.2-0ubuntu4","1.10.3-0ubuntu1","1.10.3-0ubuntu4","1.10.3-0ubuntu5","1.10.3-0ubuntu6","1.11.2-0ubuntu5~16.04","1.12.1-0ubuntu13~16.04.1","1.12.3-0ubuntu4~16.04.2","1.12.6-0ubuntu1~16.04.1","1.13.1-0ubuntu1~16.04.2","17.03.2-0ubuntu2~16.04.1","18.06.1-0ubuntu1~16.04.2","18.06.1-0ubuntu1.2~16.04.1","18.09.2-0ubuntu1~16.04.1","18.09.5-0ubuntu1~16.04.2","18.09.7-0ubuntu1~16.04.1","18.09.7-0ubuntu1~16.04.4","18.09.7-0ubuntu1~16.04.5","18.09.7-0ubuntu1~16.04.6","18.09.7-0ubuntu1~16.04.7","18.09.7-0ubuntu1~16.04.9+esm1","18.09.7-0ubuntu1~16.04.9+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"docker.io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.13.1-0ubuntu6","17.03.2-0ubuntu1","17.03.2-0ubuntu3","17.03.2-0ubuntu5","17.12.1-0ubuntu1","18.06.1-0ubuntu1~18.04.1","18.06.1-0ubuntu1.2~18.04.1","18.09.2-0ubuntu1~18.04.1","18.09.5-0ubuntu1~18.04.2","18.09.7-0ubuntu1~18.04.1","18.09.7-0ubuntu1~18.04.3","18.09.7-0ubuntu1~18.04.4","19.03.6-0ubuntu1~18.04.1","19.03.6-0ubuntu1~18.04.2","19.03.6-0ubuntu1~18.04.3","20.10.2-0ubuntu1~18.04.2","20.10.2-0ubuntu1~18.04.3","20.10.7-0ubuntu1~18.04.1","20.10.7-0ubuntu1~18.04.2","20.10.7-0ubuntu5~18.04.2","20.10.7-0ubuntu5~18.04.3","20.10.12-0ubuntu2~18.04.1","20.10.21-0ubuntu1~18.04.2","20.10.21-0ubuntu1~18.04.3","20.10.21-0ubuntu1~18.04.3+esm1","20.10.21-0ubuntu1~18.04.3+esm2","20.10.21-0ubuntu1~18.04.3+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"docker.io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["19.03.2-0ubuntu1","19.03.6-0ubuntu1","19.03.8-0ubuntu1","19.03.8-0ubuntu1.20.04","19.03.8-0ubuntu1.20.04.1","19.03.8-0ubuntu1.20.04.2","20.10.2-0ubuntu1~20.04.2","20.10.2-0ubuntu1~20.04.3","20.10.7-0ubuntu1~20.04.1","20.10.7-0ubuntu1~20.04.2","20.10.7-0ubuntu5~20.04.1","20.10.7-0ubuntu5~20.04.2","20.10.12-0ubuntu2~20.04.1","20.10.21-0ubuntu1~20.04.1","20.10.21-0ubuntu1~20.04.2","20.10.21-0ubuntu1~20.04.4","20.10.21-0ubuntu1~20.04.5","20.10.21-0ubuntu1~20.04.6","20.10.21-0ubuntu1~20.04.6+esm1","20.10.21-0ubuntu1~20.04.6+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"docker.io-app","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["20.10.25-0ubuntu1~20.04.1","20.10.25-0ubuntu1~20.04.2","24.0.5-0ubuntu1~20.04.1","24.0.7-0ubuntu2~20.04.1","26.1.3-0ubuntu1~20.04.1","26.1.3-0ubuntu1~20.04.1+esm1","26.1.3-0ubuntu1~20.04.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"docker.io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["20.10.7-0ubuntu5","20.10.7-0ubuntu7","20.10.12-0ubuntu1","20.10.12-0ubuntu2","20.10.12-0ubuntu3","20.10.12-0ubuntu3+gke1.24.1","20.10.12-0ubuntu4","20.10.21-0ubuntu1~22.04.2","20.10.21-0ubuntu1~22.04.3","20.10.21-0ubuntu1~22.04.5","20.10.21-0ubuntu1~22.04.6","20.10.21-0ubuntu1~22.04.7","20.10.21-0ubuntu1~22.04.7+esm1","20.10.21-0ubuntu1~22.04.7+esm2","20.10.21-0ubuntu1~22.04.8","20.10.21-0ubuntu1~22.04.8+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"docker.io-app","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["20.10.25-0ubuntu1~22.04.1","20.10.25-0ubuntu1~22.04.2","24.0.5-0ubuntu1~22.04.1","24.0.7-0ubuntu2~22.04.1","26.1.3-0ubuntu1~22.04.1","26.1.3-0ubuntu1~22.04.1+esm1","27.5.1-0ubuntu3~22.04.1","27.5.1-0ubuntu3~22.04.2","28.2.2-0ubuntu1~22.04.1","29.1.3-0ubuntu3~22.04.1","29.1.3-0ubuntu3~22.04.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"docker.io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["20.10.24+dfsg1-1ubuntu2","20.10.25+dfsg1-2ubuntu1","20.10.25+dfsg1-2ubuntu1+esm1","20.10.25+dfsg1-2ubuntu1+esm2","20.10.25+dfsg1-2ubuntu1.24.04.1","20.10.25+dfsg1-2ubuntu1.24.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"docker.io-app","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["24.0.5-0ubuntu1","24.0.7-0ubuntu1","24.0.7-0ubuntu2","24.0.7-0ubuntu3","24.0.7-0ubuntu4","24.0.7-0ubuntu4.1","26.1.3-0ubuntu1~24.04.1","26.1.3-0ubuntu1~24.04.1+esm1","27.5.1-0ubuntu3~24.04.1","27.5.1-0ubuntu3~24.04.2","28.2.2-0ubuntu1~24.04.1","29.1.3-0ubuntu3~24.04.1","29.1.3-0ubuntu3~24.04.2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"docker.io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["27.5.1+dfsg4-2ubuntu1","28.5.2+dfsg4-5ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"docker.io-app","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["29.1.3-0ubuntu4","29.1.3-0ubuntu5","29.1.3-0ubuntu6","29.7.2-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"docker.io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["26.1.5+dfsg1-9ubuntu1","27.5.1+dfsg4-1ubuntu1","27.5.1+dfsg4-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"docker.io-app","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["28.2.2-0ubuntu1","29.1.2-0ubuntu1","29.1.3-0ubuntu1","29.1.3-0ubuntu2","29.1.3-0ubuntu3","29.1.3-0ubuntu4","29.1.3-0ubuntu4.1"]}],"products":[{"vendor":"docker","product":"docker engine"},{"vendor":"moby","product":"moby"}],"references":[{"url":"https://github.com/moby/moby/security/advisories/GHSA-7cfq-22r6-qp73","tags":["vendor-advisory","advisory","report"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-92543","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92543","tags":["web","advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-92543","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/92xxx/CVE-2026-92543.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-92543","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4657","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4719","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4720","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4858","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-92543","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92543","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-92543","title":"Docker Engine insecure-registry fallback via malicious DNS responses","description":"Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Because the transport re-dials the hostname rather than the CIDR-matching address, a DNS answer set of one loopback IP plus a non-loopback attacker IP disables certificate verification and enables HTTP fallback for the registry connection.","status":"published","published":"2026-10-07T16:44:21.237Z","modified":"2026-10-07T20:31:28.77Z","cvss":[{"version":"4.0","score":7.6,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high","assessor":"cna"}],"cwes":["CWE-295","CWE-319"],"updated_at":"2026-11-02T13:48:24.536396Z"}],"euvd":[{"id":"EUVD-2026-94484","description":"Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Because the transport re-dials the hostname rather than the CIDR-matching address, a DNS answer set of one loopback IP plus a non-loopback attacker IP disables certificate verification and enables HTTP fallback for the registry connection.","status":"published","published":"2026-10-07T16:44:21Z","modified":"2026-10-07T20:31:28Z","cvss":[{"version":"4.0","score":7.6,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T17:27:33.904651Z"}],"nvd":[{"id":"CVE-2026-92543","description":"Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Because the transport re-dials the hostname rather than the CIDR-matching address, a DNS answer set of one loopback IP plus a non-loopback attacker IP disables certificate verification and enables HTTP fallback for the registry connection.","status":"published","published":"2026-10-07T17:17:02.727Z","modified":"2026-10-08T20:46:35.26Z","cvss":[{"version":"4.0","score":7.6,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"}],"cwes":["CWE-295","CWE-319"],"updated_at":"2026-11-02T14:12:54.809359Z"}],"osv":[{"id":"ALPINE-CVE-2026-92543","description":"Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Because the transport re-dials the hostname rather than the CIDR-matching address, a DNS answer set of one loopback IP plus a non-loopback attacker IP disables certificate verification and enables HTTP fallback for the registry connection.","status":"published","published":"2026-10-07T17:17:02.727Z","modified":"2026-11-03T06:33:04.594379836Z","cvss":[{"version":"4.0","score":7.6,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"updated_at":"2026-11-03T07:15:37.282377Z"},{"id":"CVE-2026-92543","title":"Docker Engine insecure-registry fallback via malicious DNS responses","description":"Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Because the transport re-dials the hostname rather than the CIDR-matching address, a DNS answer set of one loopback IP plus a non-loopback attacker IP disables certificate verification and enables HTTP fallback for the registry connection.","status":"published","published":"2026-10-07T16:44:21.237Z","modified":"2026-10-28T02:31:04.128470249Z","cvss":[{"version":"4.0","score":7.6,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-295","CWE-319"],"updated_at":"2026-11-02T15:45:20.588039Z"},{"id":"DEBIAN-CVE-2026-92543","description":"Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Because the transport re-dials the hostname rather than the CIDR-matching address, a DNS answer set of one loopback IP plus a non-loopback attacker IP disables certificate verification and enables HTTP fallback for the registry connection.","status":"published","published":"2026-10-07T17:17:02.727Z","modified":"2026-10-09T09:47:27.603832399Z","cvss":[{"version":"4.0","score":7.6,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"updated_at":"2026-11-02T15:46:06.846102Z"},{"id":"OESA-2026-4657","title":"docker security update","description":"Docker is an open source project to build, ship and run any application as a lightweight container.\r\n\r\nSecurity Fix(es):\n\nDocker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname\u0026apos;s addresses and returns true if a single address is in the insecure CIDR list. Because the transport re-dials the hostname rather than the CIDR-matching address, a DNS answer set of one loopback IP plus a non-loopback attacker IP disables certificate verification and enables HTTP fallback for the registry connection.(CVE-2026-92543)","status":"published","published":"2026-10-29T09:04:08Z","modified":"2026-10-29T09:15:41.801226863Z","cvss":[{"version":"4.0","score":7.6,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"OESA-2026-4719","title":"docker security update","description":"Docker is an open source project to build, ship and run any application as a lightweight container.\r\n\r\nSecurity Fix(es):\n\nDocker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname\u0026apos;s addresses and returns true if a single address is in the insecure CIDR list. Because the transport re-dials the hostname rather than the CIDR-matching address, a DNS answer set of one loopback IP plus a non-loopback attacker IP disables certificate verification and enables HTTP fallback for the registry connection.(CVE-2026-92543)","status":"published","published":"2026-11-04T13:54:52Z","modified":"2026-11-04T14:00:06.831746969Z","cvss":[{"version":"4.0","score":7.6,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-04T14:10:46.921518Z"},{"id":"OESA-2026-4720","title":"docker security update","description":"Docker is an open source project to build, ship and run any application as a lightweight container.\r\n\r\nSecurity Fix(es):\n\nDocker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname\u0026apos;s addresses and returns true if a single address is in the insecure CIDR list. Because the transport re-dials the hostname rather than the CIDR-matching address, a DNS answer set of one loopback IP plus a non-loopback attacker IP disables certificate verification and enables HTTP fallback for the registry connection.(CVE-2026-92543)","status":"published","published":"2026-11-04T13:54:53Z","modified":"2026-11-04T14:00:06.738861573Z","cvss":[{"version":"4.0","score":7.6,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-04T14:10:46.921518Z"},{"id":"OESA-2026-4858","title":"docker security update","description":"Docker is an open source project to build, ship and run any application as a lightweight container.\r\n\r\nSecurity Fix(es):\n\nDocker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname\u0026apos;s addresses and returns true if a single address is in the insecure CIDR list. Because the transport re-dials the hostname rather than the CIDR-matching address, a DNS answer set of one loopback IP plus a non-loopback attacker IP disables certificate verification and enables HTTP fallback for the registry connection.(CVE-2026-92543)","status":"published","published":"2026-11-11T12:26:54Z","modified":"2026-11-11T12:45:12.57274947Z","cvss":[{"version":"4.0","score":7.6,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-11T13:08:46.301371Z"},{"id":"UBUNTU-CVE-2026-92543","description":"Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Because the transport re-dials the hostname rather than the CIDR-matching address, a DNS answer set of one loopback IP plus a non-loopback attacker IP disables certificate verification and enables HTTP fallback for the registry connection.","status":"published","published":"2026-10-07T17:17:00Z","modified":"2026-10-17T13:00:38.822926753Z","cvss":[{"version":"4.0","score":7.6,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T16:57:40.980117Z"},{"id":"AZL-107195","title":"CVE-2026-92543 affecting package cert-manager for versions less than 1.12.15-15","description":"Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Because the transport re-dials the hostname rather than the CIDR-matching address, a DNS answer set of one loopback IP plus a non-loopback attacker IP disables certificate verification and enables HTTP fallback for the registry connection.","status":"published","published":"2026-10-07T17:17:02Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:17.969374Z"},{"id":"AZL-107315","title":"CVE-2026-92543 affecting package docker-buildx for versions less than 0.14.0-19","description":"Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Because the transport re-dials the hostname rather than the CIDR-matching address, a DNS answer set of one loopback IP plus a non-loopback attacker IP disables certificate verification and enables HTTP fallback for the registry connection.","status":"published","published":"2026-10-07T17:17:02Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:17.969374Z"},{"id":"AZL-107333","title":"CVE-2026-92543 affecting package docker-cli for versions less than 25.0.7-6","description":"Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Because the transport re-dials the hostname rather than the CIDR-matching address, a DNS answer set of one loopback IP plus a non-loopback attacker IP disables certificate verification and enables HTTP fallback for the registry connection.","status":"published","published":"2026-10-07T17:17:02Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:17.969374Z"},{"id":"AZL-107351","title":"CVE-2026-92543 affecting package docker-compose for versions less than 2.27.0-16","description":"Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Because the transport re-dials the hostname rather than the CIDR-matching address, a DNS answer set of one loopback IP plus a non-loopback attacker IP disables certificate verification and enables HTTP fallback for the registry connection.","status":"published","published":"2026-10-07T17:17:02Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:17.969374Z"},{"id":"AZL-107748","title":"CVE-2026-92543 affecting package moby-engine 25.0.18-1","description":"Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Because the transport re-dials the hostname rather than the CIDR-matching address, a DNS answer set of one loopback IP plus a non-loopback attacker IP disables certificate verification and enables HTTP fallback for the registry connection.","status":"published","published":"2026-10-07T17:17:02Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:18.199293Z"},{"id":"BELL-CVE-2026-92543","status":"published","published":"2026-10-01T21:03:02.525929Z","modified":"2026-10-02T07:15:02.379632093Z","updated_at":"2026-11-02T15:28:27.164451Z"}]}}