Docker Engine overlay network driver vulnerabilities

Latest Docker Engine overlay network driver CVEs

Newest publication first

1. CVE-2026-92542 Blind VXLAN injection into encrypted overlay networks from cluster peer

   Published 2026-10-07

   Medium·CVSS 6.9

   The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.