Exploitation timeline
Threadlinqs has recorded 5 Docker CVEs published between and . The busiest month was 2025-12 (1 new CVE). None of them is listed in CISA KEV yet.
Most exploited vulnerabilities
Ranked with CISA KEV listings first, then EPSS exploit probability, then CVSS score. Showing 5 of 5 tracked Docker CVEs.
- CVE-2026-17106high 7.1EPSS 0.4%
- CVE-2026-105445critical 9.4EPSS 0.4%
- CVE-2025-14740medium 6.7EPSS 0.2%
- CVE-2025-13743high 7.5EPSS 0.2%
- CVE-2026-103916high 8.4EPSS 0.2%
Products affected
Threadlinqs normalises CPE and CNA product records across all 5 CVEs; 6 distinct Docker products are affected. The most frequently affected:
- Desktop 3 CVEs
- Sandboxes 2 CVEs
- CLI 1 CVE
- Compose 1 CVE
- Engine 1 CVE
- Hub 1 CVE
Threat activity
12 tracked threat campaigns reference Docker products or exploit Docker CVEs:
- Docker Sandboxes (sbx CLI) Symlink Vulnerability Lets AI Agents Read/Write Host Files Outside Sandbox (CVE-2026-103916)HIGH
- Docker Hub personal access token reassignment flaw (CVE-2026-105445, "GhostPAT") enables user impersonation and image tamperingCRITICAL
- Docker CopyEscape (CVE-2026-17106): docker cp / sbx cp flaw lets malicious containers overwrite host filesHIGH
- CARBONATO Botnet Exploits Exposed Docker Daemons to Deploy AI Agent Framework, Prioritizes AI API Key TheftHIGH
- Carbonato botnet: AI-agent-driven worm hijacks unauthenticated Docker daemons on port 2375 and installs the Hermes Agent 'GH0ST' implantHIGH
- CARBONATO: Botnet Built Around an AI Agent (Hermes Agent) Spreading via Exposed Docker APIsHIGH
- NadMesh Botnet Hunts Exposed AI Services (ComfyUI, Ollama, n8n, Open WebUI, Langflow, Gradio) for Credentials and MCP Tool AccessHIGH
- Agentic Threat Actor Container Escape — AI Agent-Driven marimo CVE-2026-39987 RCE → Docker Socket → Host Breakout (nsenter) → Kubernetes Secret Store Dump (Sysdig TRT)CRITICAL
- CVE-2026-23918 — Apache HTTP Server mod_http2 Double Free Enabling Unauthenticated DoS and Possible RCECRITICAL
- PCPJack Worm — Cloud Credential Theft Framework Evicting TeamPCP Infections (CVE-2025-29927, CVE-2025-55182, CVE-2026-1357, CVE-2025-9501, CVE-2025-48703)CRITICAL
- Quasar Linux (QLNX) — Sophisticated Linux RAT With LD_PRELOAD Rootkit, PAM Backdoor & DevOps Credential Harvesting (Backdoor.Linux.QLNX.A)HIGH
- DockerDash: Critical Ask Gordon AI Vulnerability - Code Execution via Image MetadataCRITICAL
Threat actors targeting Docker
Named threat actors attributed to campaigns that involve Docker products or CVEs, with the number of linked campaigns:
How to prioritise Docker patching
This order follows the data Threadlinqs holds for Docker, not a generic severity checklist:
- No Docker CVE is in CISA KEV yet, so rank by exploit probability instead.
- Outside KEV, the highest EPSS scores are CVE-2026-17106 (0.4%), CVE-2026-105445 (0.4%), CVE-2025-14740 (0.2%).
- 1 CVE scores Critical and 3 High on CVSS v3 (maximum 9.4, average 7.8); sequence these after KEV and high-EPSS items.
- 2 CVEs have a public exploit or proof of concept recorded, which shortens the time from disclosure to attack.
About this data
Vendor attribution comes from the CNA and CPE product records of each CVE, folded to one vendor name; CVSS, EPSS and KEV status are read from the Threadlinqs CVE catalog; campaign and actor links come from tracked threat records. Counts reflect the data as of 2026-11-11 and refresh daily.