Docker security advisories, September 2026

Every Docker security advisory published in September 2026, from Docker Security ([email protected] CNA) + NVD, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 2
Critical: 1
High: 1
In CISA KEV: 0
CVEs: 2

Docker advisories published in September 2026

Sep 15, 2026
Critical [CVE-2026-77179] On macOS, the virtio-fs host server used by Docker Sandboxes improperly follows symlinks when reopening an unlinked file from a stored path
Critical9.4
Sep 15, 2026
High [CVE-2026-79994] The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname
High8.7

Get an email when Docker publishes the next one.

See Docker's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Docker

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.