Docker Engine vulnerabilities

• docker engine, engine overlay network driver, moby overlay network driver +2 more Blind VXLAN injection into encrypted overlay networks from cluster peer CVE-2026-92542 Fix available 6.9 MediumOctober 1, 2026
• docker engine, moby +1 more Docker Engine insecure-registry fallback via malicious DNS responses CVE-2026-92543 Fix available 7.6 HighOctober 1, 2026
• moby go-archive, docker cli, compose +3 more +5 more Tar extraction in moby/go-archive can write outside the destination directory via link following CVE-2026-17106 Public exploitFix available 7.1 HighAugust 18, 2026
• docker engine, moby, mobyproject moby\/v2 +2 more Moby: Race condition in docker cp allows bind mount redirection to host path CVE-2026-42306 Fix available 7.2 HighMay 18, 2026
• docker engine, moby, mobyproject moby\/v2 +2 more Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap CVE-2026-41568 Fix available 6.1 MediumMay 18, 2026
• docker engine, moby docker engine, docker docker/daemon +20 more +22 more Docker: `PUT /containers/{id}/archive` executes container binary on the host CVE-2026-41567 Public exploitFix available 7.2 HighMay 18, 2026
• moby, docker engine +1 more Moby: AuthZ plugin bypass with oversized request body CVE-2026-34040 Public exploitFix available 8.8 HighMarch 27, 2026
• moby, docker engine, red hat multicluster engine for kubernetes +7 more +9 more Moby: Off-by-one error in plugin privilege validation CVE-2026-33997 Fix available 6.8 MediumMarch 27, 2026
• docker engine, broadcom sannav, debian linux +1 more +3 more Improper Input Validation in Docker Engine CVE-2020-13401 Public exploitFix available 6.0 MediumJune 2, 2020
• docker engine, redhat enterprise linux server +1 more Docker Engine before 18.09 allows attackers to cause a denial of service (dockerd memory... CVE-2018-20699 Fix available 4.9 MediumJanuary 12, 2019
• docker cs docker engine, docker, docker engine +2 more +4 more Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and... CVE-2014-8179 Fix available 7.5 HighOctober 14, 2015
• docker cs docker engine, docker, docker engine +2 more +4 more Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique... CVE-2014-8178 Fix available 5.5 MediumOctober 14, 2015