Home / Apr 08, 2026 / Story
0
#6 The Hacker News general April 07, 2026 at 15:15 UTC

Docker CVE-2026-34040 Lets Attackers Bypass Authorization and Gain Host Access

By [email protected] (The Hacker News)

AI Summary

Docker Engine vulnerability CVE-2026-34040 (CVSS 8.8) allows attackers to bypass authorization plugins (AuthZ) and gain host access under specific circumstances. The flaw stems from an incomplete fix for CVE-2024-41110, a previous maximum-severity vulnerability in the same component discovered in July 2024.

Relevance score: 85.0/100

# More from April 08