LIVE · cybersecurity feed
Live wire
ASOS Breach Reveals the Risks in Customer-Facing SaaSUnpatched AhsayCBS flaws exploited to deploy webshells, mine cryptoAI Training Critical as Governance Challenges GrowUS Disrupts Chinese State-Sponsored Hacking ToolsCitrix warns admins to patch new NetScaler RCE flaw immediatelyCisco Patches a Dozen Critical VulnerabilitiesCisco warns of critical flaws allowing Nexus switch takeoverCVE-2026-21589 · Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)Cyber experts call on CISA to create mandatory federal OT rulesGremlin Foresight AI finds system weaknesses and verifies the fixes
vendor

Docker

4 CVEs published in the last four months and 2 stories. Exploited flaws first.

Critical0
High4
Medium0
Exploited (KEV)0

All recent CVEs

CVECVSSSeverityProductSummaryPublished
CVE-2026-64068.8highdocker desktopThe Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation (ECI) restrictions in Docker Desktop.158d ago
CVE-2026-58178.2highdocker desktopThe vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trust_remote_code=True when l158d ago
CVE-2026-58438.2highdocker desktopThe MLX inference backend in Docker Model Runner on macOS uses the MLX-LM library, which unconditionally imports an158d ago
CVE-2026-423067.2highengineMoby is an open source container framework.137d ago

Filter the full tracker by Docker →

Our coverage of Docker

CVE-2026-20896critical

Critical Gitea Docker Bug Under Active Exploitation Exposes Repositories and Secrets

Attackers are actively exploiting a critical vulnerability in Gitea's official Docker images, enabling them to bypass authentication and gain access to sensitive repositories and secrets. The flaw, identified as CVE-2026-20896, carries a high severity score of 9.8.

CVE-2026-20896critical

Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure

Security researchers have detected malicious actors actively probing for a critical vulnerability in Gitea Docker images, just thirteen days after the issue was publicly disclosed and patched. The vulnerability, designated CVE-2026-20896, carries a severe CVSS score of 9.8, indicating a high level of risk.