ZDI-CAN-29308 HIGH 8.8 Upcoming Feb 25, 2026

Docker

Docker, a leading containerization platform, has a high-severity vulnerability (CVSS 8.8) that requires local access and low-level user privileges to exploit, but once compromised grants attackers complete control over confidentiality, integrity, and availability of the affected system. The vulnerability affects the broader system scope beyond just the Docker component itself, making it particularly dangerous in multi-tenant or shared environments. Security teams should monitor for this advisory's public disclosure around the June 2026 vendor deadline and prioritize patching Docker installations that host sensitive workloads or run in environments with untrusted local users.

Advisory Details
Researcher Nitesh Surana (niteshsurana.com) of TrendAI Research
Reported February 25, 2026
Deadline June 25, 2026 70d
CVSS Vector AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy