CVE-2026-92542: Docker Engine 0 to before 25.0.19, 26.0.0 to before 29.8.2; +2 more affected products

Affected technology

Docker Engine · 0 to before 25.0.19, 26.0.0 to before 29.8.2
Docker

Docker Engine overlay network driver · 0 to before v25.0.19, v26.0.0 to before *
Docker

Moby overlay network driver · v2.0.0-beta.0 to before v2.0.0-beta.25
Moby

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Local · Low privileges required · No user interaction required

What an attacker can do

Vendor/CNA’s CVSS 4.0 assessment (base score 6.9/10) rates confidentiality impact as none; integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.