Docker

4 CVEs published in the last four months and 2 stories. Exploited flaws first.

Critical0

High4

Medium0

Exploited (KEV)0

All recent CVEs

CVE	CVSS	Severity	Product	Summary	Published
CVE-2026-6406	8.8	high	docker desktop	The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation (ECI) restrictions in Docker Desktop.	106d ago
CVE-2026-5817	8.2	high	docker desktop	The vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trust_remote_code=True when l	106d ago
CVE-2026-5843	8.2	high	docker desktop	The MLX inference backend in Docker Model Runner on macOS uses the MLX-LM library, which unconditionally imports an	106d ago
CVE-2026-42306	7.2	high	engine	Moby is an open source container framework.	85d ago

Filter the full tracker by Docker →

Our coverage of Docker

CVE-2026-20896Jul 7, 2026critical

Critical Gitea Docker Bug Under Active Exploitation Exposes Repositories and Secrets

A critical vulnerability in Gitea's Docker images, identified as CVE-2026-20896, allows attackers to bypass authentication using a single HTTP header. This flaw, stemming from insecure default configurations that trust any IP address for reverse proxy authentication, enables unauthorized access to repositories and sensitive data. Researchers have observed active exploitation of this vulnerability shortly after its disclosure.

CVE-2026-20896Jul 6, 2026critical

Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure

Threat actors have been observed attempting to exploit a recently patched critical security flaw in Gitea Docker images, according to Sysdig. The vulnerability in question is CVE-2026-20896 (CVSS score: 9.8), a vulnerability that stems from