#6
The Hacker News
general
April 07, 2026 at 15:15 UTC
Docker CVE-2026-34040 Lets Attackers Bypass Authorization and Gain Host Access
By [email protected] (The Hacker News)
AI Summary
Docker Engine vulnerability CVE-2026-34040 (CVSS 8.8) allows attackers to bypass authorization plugins (AuthZ) and gain host access under specific circumstances. The flaw stems from an incomplete fix for CVE-2024-41110, a previous maximum-severity vulnerability in the same component discovered in July 2024.
Relevance score: 85.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →