CERT-FR advisory CERTFR-2026-AVI-1401: multiple vulnerabilities in Docker Desktop before 4.97.0
CERT-FR issued advisory CERTFR-2026-AVI-1401 on 28 October 2026 relaying Docker security bulletins published on 27 October 2026. Multiple vulnerabilities affect Docker Desktop versions prior to 4.97.0, tracked as CVE-2026-114409 and CVE-2026-99999. Exploitation can lead to a breach of data confidentiality and a security policy bypass. No information on active exploitation or attack vector is given in the advisory.
Entenda a falha
A vulnerabilidade
CERT-FR advisory CERTFR-2026-AVI-1401 relays Docker bulletins for two CVEs, CVE-2026-114409 and CVE-2026-99999, in Docker Desktop. Versions before 4.97.0 are affected and 4.97.0 fixes them. The advisory says an attacker could breach data confidentiality and bypass the security policy. It does not say which component is affected, what the attacker needs (network reach, authentication, configuration, user interaction), or which CVE causes which impact. It does not rank their severity.
Como foi descoberta
Docker published the security bulletins on 27 October 2026, and CERT-FR relayed them in its advisory of 28 October 2026. The sources do not say who found the flaws or how, or whether they were reported privately beforehand. They give no information on active exploitation.
Explicação gerada por IA a partir da matéria e dos artigos, em 29/10/2026 13:30.
Remediação
- Upgrade Docker Desktop to version 4.97.0 or later as described in the Docker security announcements.
Linha do tempo
-
CERT-FR advisory CERTFR-2026-AVI-1401: multiple vulnerabilities in Docker Desktop before 4.97.0
ler a análise desta fonte ocultar
CERT-FR issued advisory CERTFR-2026-AVI-1401 on 28 October 2026 relaying Docker security bulletins published on 27 October 2026. Multiple vulnerabilities affect Docker Desktop versions prior to 4.97.0, tracked as CVE-2026-114409 and CVE-2026-99999. Exploitation can lead to a breach of data confidentiality and a security policy bypass. No information on active exploitation or attack vector is given in the advisory.
Remediation
- Upgrade Docker Desktop to version 4.97.0 or later as described in the Docker security announcements.