# Docker in October 2026: incidents, uptime and changes

> Docker in October 2026: 2 incidents on its status page (1 major or critical), 99.97% free of major or critical incidents (vendor-reported), 19 CVEs. From Rewindex’s archive of Docker’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/docker/2026/10
Last updated: 2026-11-01T00:00:00Z

- Incidents posted: 2 (major/critical: 1) · Maintenance: 0
- By vendor impact label: major 1, minor 1
- Uptime (vendor-reported): 99.97% free of major/critical incidents, 99.78% free of any incident; outage time 10 min, incident time 1 h 36 min
- Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 0 · CVEs: 19
- Previous month: [September 2026](https://rewindex.com/company/docker/2026/09.md) · Next: none · [All months](https://rewindex.com/company/docker/reports.md) · [Docker](https://rewindex.com/company/docker.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## Major and critical incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Hub Registry Authenticated Actions Failing](https://rewindex.com/company/docker/incidents/01M4HA1E00AH6NXA276AW0CK2V.md) | major | 2026-10-09 21:45 UTC | 2026-10-09 21:55 UTC | 10 min | resolved |

## All incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Hub Registry Authenticated Actions Failing](https://rewindex.com/company/docker/incidents/01M4HA1E00AH6NXA276AW0CK2V.md) | major | 2026-10-09 21:45 UTC | 2026-10-09 21:55 UTC | 10 min | resolved |
| [Degraded performance and intermittent availability on Docker Hub](https://rewindex.com/company/docker/incidents/01M5FCZN1R96K7AHXP1FVZE9GG.md) | minor | 2026-10-21 14:14 UTC | 2026-10-21 15:39 UTC | 1.4 h | resolved |

## CVEs published

- [CVE-2026-93316](https://rewindex.com/cve/CVE-2026-93316.md) Starting daemon with --cdi-disabled flag can lead to panic on specific builds (CVSS 7.1), published 2026-10-05
- [CVE-2026-93317](https://rewindex.com/cve/CVE-2026-93317.md) Container blob cache can accept unverified content (CVSS 5.9), published 2026-10-05
- [CVE-2026-93318](https://rewindex.com/cve/CVE-2026-93318.md) Cache poisoning via unvalidated image layer DiffIDs (CVSS 7.5), published 2026-10-05
- [CVE-2026-93319](https://rewindex.com/cve/CVE-2026-93319.md) A malicious frontend can cause a daemon panic (CVSS 5.7), published 2026-10-05
- [CVE-2026-93320](https://rewindex.com/cve/CVE-2026-93320.md) BuildKit improperly handles special files in build snapshots (CVSS 6.0), published 2026-10-05
- [CVE-2026-93322](https://rewindex.com/cve/CVE-2026-93322.md) Malformed MergeOp can crash the BuildKit daemon (CVSS 6.9), published 2026-10-05
- [CVE-2026-93323](https://rewindex.com/cve/CVE-2026-93323.md) Oversized Dockerfile or .dockerignore can exhaust buildkitd memory (CVSS 6.8), published 2026-10-05
- [CVE-2026-93326](https://rewindex.com/cve/CVE-2026-93326.md) Crafted Git build source can bypass certain policy validation (CVSS 6.0), published 2026-10-05
- [CVE-2026-103433](https://rewindex.com/cve/CVE-2026-103433.md) Bake filesystem entitlement consent is skipped for certain secret and oci-layout definitions (CVSS 6.9), published 2026-10-05
- [CVE-2026-93315](https://rewindex.com/cve/CVE-2026-93315.md) BuildKit proxy CA cleanup can be disrupted by build steps (CVSS 5.8), published 2026-10-05
- [CVE-2026-93321](https://rewindex.com/cve/CVE-2026-93321.md) Malformed LLB file operation can crash buildkitd (CVSS 6.9), published 2026-10-05
- [CVE-2026-92542](https://rewindex.com/cve/CVE-2026-92542.md) Blind VXLAN injection into encrypted overlay networks from cluster peer (CVSS 6.9), published 2026-10-07
- [CVE-2026-92543](https://rewindex.com/cve/CVE-2026-92543.md) Docker Engine insecure-registry fallback via malicious DNS responses (CVSS 7.6), published 2026-10-07
- [CVE-2026-105570](https://rewindex.com/cve/CVE-2026-105570.md) Docker Sandboxes OAuth response masking could be bypassed with a case-variant token host (CVSS 6.7), published 2026-10-08
- [CVE-2026-101998](https://rewindex.com/cve/CVE-2026-101998.md) Fail-open response masking in Docker Sandboxes can expose proxy-managed credentials (CVSS 5.9), published 2026-10-08
- [CVE-2026-105452](https://rewindex.com/cve/CVE-2026-105452.md) Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hosts (CVSS 5.9), published 2026-10-08
- [CVE-2026-106581](https://rewindex.com/cve/CVE-2026-106581.md) Docker Desktop for Windows installer failed to verify external packages (CVSS 8.2), published 2026-10-09
- [CVE-2026-105445](https://rewindex.com/cve/CVE-2026-105445.md) Docker Hub account conversion could reassign an active personal access token to another user (CVSS 9.4), published 2026-10-13
- [CVE-2026-114409](https://rewindex.com/cve/CVE-2026-114409.md) Docker Desktop logs can expose stored third-party credentials (CVSS 5.7), published 2026-10-27

## Cite this

Docker posted 2 status incidents in October 2026 (1 major or critical); 0 price changes and 0 notable page changes observed.

- Canonical URL: https://rewindex.com/company/docker/2026/10
- Citation: Docker, “Docker in October 2026” (2026-10-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/docker/2026/10 (CC BY 4.0).
- Markdown link: `[Docker: Docker in October 2026 (2026-10-01)](https://rewindex.com/company/docker/2026/10)`


---
Canonical: https://rewindex.com/company/docker/2026/10 · Markdown: https://rewindex.com/company/docker/2026/10.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T13:53:52.327Z