Known Vulnerabilities for Docker CLI by Docker
Listed below are 10 of the newest known vulnerabilities associated with "Docker CLI" by "Docker".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-103053 json | AiSOC versions 9.0.0 before 12.0.0 fail to enforce authentication on the response-action API endpoints when AISOC_DEV_MODE is... | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-101065 json | Obot is an open-source AI agent/MCP platform. In all versions up to and including commit d7e6970, the Docker quickstart comma... | Not Provided | 2026-09-27 | 2026-09-30 |
| CVE-2026-100860 json | heym before 0.0.105 does not act on the result of the credential authorization lookup in the Redis workflow node (backend/app... | Not Provided | 2026-09-27 | 2026-09-28 |
| CVE-2026-100850 json | AzuraCast before 0.23.8 contains a server-side request forgery and local file read vulnerability in the AutoDJ remote playlis... | Not Provided | 2026-09-27 | 2026-09-30 |
| CVE-2026-96795 json | Horilla is an HR and CRM software. Prior to 2.0.0, HorillaListView.export_data in horilla_views/generic/cbv/views.py accepts ... | Not Provided | 2026-09-25 | 2026-09-28 |
| CVE-2026-93987 json | rclone versions 1.56.0 through 1.75.0 contain a path traversal vulnerability in the `rclone serve docker` volume plugin. newV... | Not Provided | 2026-09-19 | 2026-09-21 |
| CVE-2026-93425 json | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the patch.readRepoDirectories tRPC procedure... | Not Provided | 2026-09-24 | 2026-09-24 |
| CVE-2026-92762 json | Pelican Panel versions before 1.0.0-beta35 enforce startup write permissions only through disabled form controls rather than ... | Not Provided | 2026-09-16 | 2026-09-18 |
| CVE-2026-92750 json | Harness through 3.3.0 omits access control validation in the infrastructure provider read endpoint, allowing authenticated us... | Not Provided | 2026-09-16 | 2026-09-17 |
| CVE-2026-91942 json | crawl4ai before 0.9.3 contains a DOM-based cross-site scripting vulnerability in the Docker Playground UI that assigns untrus... | Not Provided | 2026-09-15 | 2026-09-17 |