CompaniesDockerMonthly reportsOctober 2026
Docker in October 2026: incidents, uptime and changes
2incidents posted
1labelled major or critical
99.97%free of major/critical
99.78%free of any incident
0price changes
0notable page changes
Vendor-reported outage time 10 min, incident time 1 h 36 min. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
By vendor label: Major 1 · Minor 1
Major and critical incidents 1
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Hub Registry Authenticated Actions Failing | Major | 10 min | resolved | 10-09 |
Other incidents 1
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Degraded performance and intermittent availability on Docker Hub | Minor | 1.4 h | resolved | 10-21 |
CVEs published
- CVE-2026-93316 Starting daemon with --cdi-disabled flag can lead to panic on specific builds (CVSS 7.1)
- CVE-2026-93317 Container blob cache can accept unverified content (CVSS 5.9)
- CVE-2026-93318 Cache poisoning via unvalidated image layer DiffIDs (CVSS 7.5)
- CVE-2026-93319 A malicious frontend can cause a daemon panic (CVSS 5.7)
- CVE-2026-93320 BuildKit improperly handles special files in build snapshots (CVSS 6.0)
- CVE-2026-93322 Malformed MergeOp can crash the BuildKit daemon (CVSS 6.9)
- CVE-2026-93323 Oversized Dockerfile or .dockerignore can exhaust buildkitd memory (CVSS 6.8)
- CVE-2026-93326 Crafted Git build source can bypass certain policy validation (CVSS 6.0)
- CVE-2026-103433 Bake filesystem entitlement consent is skipped for certain secret and oci-layout definitions (CVSS 6.9)
- CVE-2026-93315 BuildKit proxy CA cleanup can be disrupted by build steps (CVSS 5.8)
- CVE-2026-93321 Malformed LLB file operation can crash buildkitd (CVSS 6.9)
- CVE-2026-92542 Blind VXLAN injection into encrypted overlay networks from cluster peer (CVSS 6.9)
- CVE-2026-92543 Docker Engine insecure-registry fallback via malicious DNS responses (CVSS 7.6)
- CVE-2026-105570 Docker Sandboxes OAuth response masking could be bypassed with a case-variant token host (CVSS 6.7)
- CVE-2026-101998 Fail-open response masking in Docker Sandboxes can expose proxy-managed credentials (CVSS 5.9)
- CVE-2026-105452 Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hosts (CVSS 5.9)
- CVE-2026-106581 Docker Desktop for Windows installer failed to verify external packages (CVSS 8.2)
- CVE-2026-105445 Docker Hub account conversion could reassign an active personal access token to another user (CVSS 9.4)
- CVE-2026-114409 Docker Desktop logs can expose stored third-party credentials (CVSS 5.7)
Cite this
Docker posted 2 status incidents in October 2026 (1 major or critical); 0 price changes and 0 notable page changes observed.
- Title
- Docker in October 2026
- Vendor
- Docker
- Date
- URL
- https://rewindex.com/company/docker/2026/10