Docker Engine — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• Critical XSS and Code Execution Vulnerabilities in Fedora Prometheus Update

  On July 2, 2026, Fedora released an update for Prometheus addressing multiple critical vulnerabilities. The update includes fixes for CVE-2026-40186, CVE-2026-44990, CVE-2026-41567, CVE-2026-53606, and CVE-2026-25681.…

  2 articles · Updated July 11, 2026
• Docker Patches Critical AuthZ Bypass Vulnerability CVE-2026-34040

  Docker has addressed a critical vulnerability, tracked as CVE-2026-34040, that allows attackers to bypass authorization checks and create containers with excessive privileges. The flaw arises from middleware issues in…

  4 articles · Updated April 8, 2026
• Docker Compose Vulnerability Allows Host-Level File Overwrites

  A vulnerability in Docker Compose, identified as CVE-2025-62725, has been discovered, allowing attackers to perform path traversal attacks that can lead to host-level file overwrites. The flaw was reported by Imperva's…

  2 articles · Updated October 30, 2025

Recent Intelligence Reports

• Fedora 44 Prometheus Update Critical Security Issues 2026 — Linuxsecurity · July 11, 2026
• Docker fixes AuthZ bypass bug that created containers with excessive privileges — Scworld · April 8, 2026
• Docker Vulnerability Let Attackers Bypass Authorization and Gain Host Access — Cybersecuritynews · April 8, 2026
• Docker Authorization Bypass Flaw Exposed Hosts to Potential Attackers — Gbhackers · April 8, 2026
• Docker Compose vulnerability opens door to host-level writes — Theregister · October 30, 2025

Related Entities