Docker

www.docker.com ↗ Bug Bounty ↗
D
RISKY
39
Total CVEs
7
Crit / High
5
Medium
2%
Unpatched
22%
Patched
7.8
Avg CVSS
0
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB How we collect data →
// INTEL UPGRADE
Full Company Dossier — Coming Soon
Executive profiles, financial exposure, M&A risk, breach history & supply-chain threat mapping — all in one place.
OSINT FINANCIALS EXEC PROFILES BREACH DB
▸ CVE Trend by Year
▸ Patch Coverage
Patched
22%
Unpatched
2%
Under Review
62%
Pending
15%
✓ 12 patched ✗ 1 unpatched ~ 34 under review ⏳ 8 pending score
▸ Intelligence by Audience
PoC Available
2 / 20 shown
CISA KEV (Exploited)
0
Shodan Dorks
ssl:"docker" port:443
org:"Docker" http.status:200
Top EPSS (Exploitation Probability)
CVE-2026-33997 0.51% exploitation probability
CVE-2025-15558 0.47% exploitation probability
CVE-2026-103433 0.29% exploitation probability
CVE-2026-55887 0.22% exploitation probability
CVE-2026-6406 0.20% exploitation probability
🎯 Bug Bounty Program: https://www.docker.com/company/security/
Quick Facts for Reporting
Total CVEs tracked
39
Critical severity
2
Actively exploited (CISA)
0
Unpatched ratio
2%
Avg CVSS score
7.8
Security grade
D (RISKY)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-08-03
Security Risk Score (for investors)
LOW
Vuln Volume
GOOD
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
▸ Security News Google News
Critical Docker Hub Vulnerability Lets Attackers Impersonate Users and Tamper With Container Images - GBHackers News
GBHackers News 13h ago
Critical Docker Hub Flaw Lets Attackers Impersonate Users and Push Container Images - CyberSecurityNews
CyberSecurityNews 1d ago
Docker Fixes Critical Two-Year Hub Flaw That Let Users Push Images as Others - news.lavx.hu
news.lavx.hu 22h ago
Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure - The Hacker News
The Hacker News 2026-07-06
Gitea Docker Vulnerability Now Under Active Probing, CVE-2026-20896 - Latest Hacking News - Exploits, Vulnerabilities, Tech and Tutorials
Latest Hacking News - Exploits, Vulnerabilities, Tech and Tutorials 2026-07-07
Hardened Images Aim to Squash Container Vulnerabilities - Dark Reading
Dark Reading 2025-11-14
▸ Recent CVEs showing 20 of 55
CVE IDSeverityPatchEPSSDate
CVE-2026-106581 PoC ? N/A UNKNOWN / UNPATCHED — 2026-10-09
CVE-2026-105452 ? N/A UNKNOWN / UNPATCHED 0.14% 2026-10-08
CVE-2026-105570 ? N/A UNKNOWN / UNPATCHED 0.13% 2026-10-08
CVE-2026-101998 ? N/A UNKNOWN / UNPATCHED 0.16% 2026-10-08
CVE-2026-92543 ? N/A UNKNOWN / UNPATCHED 0.09% 2026-10-07
CVE-2026-93323 ? N/A UNKNOWN / UNPATCHED 0.11% 2026-10-05
CVE-2026-103433 ? N/A PATCH UNDER REVIEW 0.29% 2026-10-05
CVE-2026-79994 7.5 HIGH PATCH UNDER REVIEW 0.14% 2026-09-15
CVE-2026-55887 9.6 CRITICAL PATCH UNDER REVIEW 0.22% 2026-09-15
CVE-2026-77179 7.8 HIGH PATCH UNDER REVIEW 0.20% 2026-09-15
CVE-2026-18171 PoC ? N/A UNKNOWN / UNPATCHED 0.10% 2026-08-12
CVE-2026-12539 5.1 MEDIUM PATCHED / FIX AVAILABLE 0.14% 2026-06-18
CVE-2026-12039 5.7 MEDIUM PATCHED / FIX AVAILABLE 0.15% 2026-06-18
CVE-2026-8936 8.2 HIGH PATCH UNDER REVIEW 0.11% 2026-06-02
CVE-2026-5843 8.8 HIGH PATCH UNDER REVIEW 0.18% 2026-05-22
CVE-2026-5817 8.8 HIGH PATCH UNDER REVIEW 0.18% 2026-05-22
CVE-2026-6406 8.8 HIGH PATCH UNDER REVIEW 0.20% 2026-05-22
CVE-2026-33997 6.8 MEDIUM PATCHED / FIX AVAILABLE 0.51% 2026-03-31
CVE-2025-15558 7.0 HIGH PATCHED / FIX AVAILABLE 0.47% 2026-03-04
CVE-2026-2664 6.8 MEDIUM PATCH UNDER REVIEW 0.19% 2026-02-24
View all 55 CVEs for Docker →
▸Intel
HQPalo Alto, California, United States
Founded2010
CEOScott Johnston
Bug BountyView Program ↗
Trust ScoreD — RISKY
Max CVSS10.0
Last Updated2026-08-03
▸Top Weaknesses
CWE-862
Unknown Weakness Type
4 occurrences in Docker CVEs (10% of total)
CWE-862 ⓘ
4
CWE-94
Code Injection
3 occurrences in Docker CVEs (8% of total)
CWE-94 ⓘ
3
CWE-22
Unknown Weakness Type
3 occurrences in Docker CVEs (8% of total)
CWE-22 ⓘ
3
CWE-532 (Insertion of Sensitive Information into Log File)
Unknown Weakness Type
3 occurrences in Docker CVEs (8% of total)
CWE-532 (Insertion of Sensitive Information into Log File) ⓘ
3
CWE-400
Uncontrolled Resource Consumption
2 occurrences in Docker CVEs (5% of total)
CWE-400 ⓘ
2
CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor)
Unknown Weakness Type
2 occurrences in Docker CVEs (5% of total)
CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor) ⓘ
2
CWE-306
Missing Authentication
2 occurrences in Docker CVEs (5% of total)
CWE-306 ⓘ
2
CWE-863 (Incorrect Authorization)
Unknown Weakness Type
1 occurrence in Docker CVEs (3% of total)
CWE-863 (Incorrect Authorization) ⓘ
1
▸Company Profile

Docker provides containerization software that enables developers to package applications into standardized units for deployment. Its flagship product, Docker Engine, is widely used for building, shipping, and running distributed applications, making it a critical component in modern DevSecOps pipelines. The platform's security relevance stems from its role in managing container images, runtime isolation, and supply chain vulnerabilities.

▸Response Metrics
Est. MTTR ⓘ ~213 days (Poor)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ → stable (0%)
CVE count 2026 vs 2025:  14 → 14 CVEs
Patch Speed ⓘ Poor (>65% open)
2% of CVEs still unpatched.  Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
▸ Financial Risk Estimate
Est. GDPR Low
€605K
Est. GDPR High
€6.0M

Based on 2 critical CVEs, 0 CISA KEV, 97% unpatched. Model: GDPR Art.83 · not legal advice.

▸Actions
⚖ Compare with another vendor
▸Embed Badge
Docker D valtersit.com