Docker Engine vulnerabilities

• docker engine, engine overlay network driver, moby overlay network driver +2 more Blind VXLAN injection into encrypted overlay networks from cluster peer CVE-2026-92542 Fix available 6.9 MediumOctober 1, 2026
• docker engine, moby +1 more Docker Engine insecure-registry fallback via malicious DNS responses CVE-2026-92543 Fix available 7.6 HighOctober 1, 2026
• moby go-archive, docker cli, compose +3 more +5 more Tar extraction in moby/go-archive can write outside the destination directory via link following CVE-2026-17106 Public exploitFix available 7.1 HighAugust 18, 2026
• docker engine, moby docker engine, docker docker/daemon +20 more +22 more Docker: `PUT /containers/{id}/archive` executes container binary on the host CVE-2026-41567 Public exploitFix available 7.2 HighMay 18, 2026
• docker cs docker engine, docker, docker engine +2 more +4 more Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and... CVE-2014-8179 Fix available 7.5 HighOctober 14, 2015
• docker cs docker engine, docker, docker engine +2 more +4 more Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique... CVE-2014-8178 Fix available 5.5 MediumOctober 14, 2015