# Docker vulnerabilities > Docker has 101 published vulnerabilities across 31 products in our catalogue. 3 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Docker, with 53. If you run Docker software, patch the exploited flaws first. Canonical page: https://www.precursorintelligence.com/vendors/docker ## At a glance - **Published vulnerabilities:** 101 - **Known to be exploited:** 3 - **Products:** 31 - **Versions:** 1,184 - **Most recently added to the known-exploited list:** [CVE-2026-102489](https://www.precursorintelligence.com/what-is/cve-2026-102489), 2 October 2026. We keep watching the list. ## Which Docker products have the most vulnerabilities? - [Docker](https://www.precursorintelligence.com/product/docker/docker): 53 published vulnerabilities, 193 versions - [Docker Desktop](https://www.precursorintelligence.com/product/docker/docker_desktop): 14 published vulnerabilities, 121 versions - [Desktop](https://www.precursorintelligence.com/product/docker/desktop): 12 published vulnerabilities, 135 versions - [Cs Engine](https://www.precursorintelligence.com/product/docker/cs_engine): 2 published vulnerabilities, 6 versions - [Notary](https://www.precursorintelligence.com/product/docker/notary): 2 published vulnerabilities, 3 versions - [Engine](https://www.precursorintelligence.com/product/docker/engine): 2 published vulnerabilities, 124 versions - [Libcontainer](https://www.precursorintelligence.com/product/docker/libcontainer): 2 published vulnerabilities, 1 version - [Docs](https://www.precursorintelligence.com/product/docker/docs): 1 published vulnerability, 1 version - [Elixir Alpine Docker Image](https://www.precursorintelligence.com/product/docker/elixir_alpine_docker_image): 1 published vulnerability, 14 versions - [Storm Docker Image](https://www.precursorintelligence.com/product/docker/storm_docker_image): 1 published vulnerability, 21 versions Each product page lists its own known-exploited flaws. ## Which Docker vulnerabilities are being exploited? 3 flaws are on the government list of vulnerabilities known to be exploited, newest first: - [CVE-2026-102489](https://www.precursorintelligence.com/what-is/cve-2026-102489): Zammad GmbH Zammad Session Fixation Vulnerability. Critical, CVSS 9.4, chance of use in 30 days 1.3%, known exploited since 2 October 2026. - [CVE-2026-102490](https://www.precursorintelligence.com/what-is/cve-2026-102490): Zammad GmbH Zammad Improper Privilege Management Vulnerability. Critical, CVSS 9.4, chance of use in 30 days 0.5%, known exploited since 2 October 2026. - [CVE-2019-15752](https://www.precursorintelligence.com/what-is/cve-2019-15752): Docker Desktop Community Edition Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 49%, known exploited since 3 November 2021. ## Which Docker flaws are most likely to be used? Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days): - [CVE-2019-5736](https://www.precursorintelligence.com/what-is/cve-2019-5736): 98%, High (CVSS 8.6) - [CVE-2019-15752](https://www.precursorintelligence.com/what-is/cve-2019-15752): 49%, High (CVSS 7.8), known exploited - [CVE-2019-14271](https://www.precursorintelligence.com/what-is/cve-2019-14271): 19%, Critical (CVSS 9.8) - [CVE-2014-0048](https://www.precursorintelligence.com/what-is/cve-2014-0048): 7.3%, Critical (CVSS 9.8) - [CVE-2014-9357](https://www.precursorintelligence.com/what-is/cve-2014-9357): 6.2%, Critical (CVSS 10.0) - [CVE-2014-9356](https://www.precursorintelligence.com/what-is/cve-2014-9356): 4.9%, High (CVSS 8.6) - [CVE-2014-6407](https://www.precursorintelligence.com/what-is/cve-2014-6407): 4.9%, High (CVSS 7.5) - [CVE-2019-16884](https://www.precursorintelligence.com/what-is/cve-2019-16884): 4.4%, High (CVSS 7.5) - [CVE-2019-13509](https://www.precursorintelligence.com/what-is/cve-2019-13509): 3.7%, High (CVSS 7.5) - [CVE-2018-15664](https://www.precursorintelligence.com/what-is/cve-2018-15664): 3.4%, High (CVSS 7.5) ## All Docker products we track 30 products with at least one tracked version, most vulnerabilities first: - [Docker](https://www.precursorintelligence.com/product/docker/docker): 53 vulnerabilities, 193 versions - [Docker Desktop](https://www.precursorintelligence.com/product/docker/docker_desktop): 14 vulnerabilities, 121 versions - [Desktop](https://www.precursorintelligence.com/product/docker/desktop): 12 vulnerabilities, 135 versions - [Cs Engine](https://www.precursorintelligence.com/product/docker/cs_engine): 2 vulnerabilities, 6 versions - [Notary](https://www.precursorintelligence.com/product/docker/notary): 2 vulnerabilities, 3 versions - [Engine](https://www.precursorintelligence.com/product/docker/engine): 2 vulnerabilities, 124 versions - [Libcontainer](https://www.precursorintelligence.com/product/docker/libcontainer): 2 vulnerabilities, 1 version - [Docs](https://www.precursorintelligence.com/product/docker/docs): 1 vulnerability, 1 version - [Elixir Alpine Docker Image](https://www.precursorintelligence.com/product/docker/elixir_alpine_docker_image): 1 vulnerability, 14 versions - [Storm Docker Image](https://www.precursorintelligence.com/product/docker/storm_docker_image): 1 vulnerability, 21 versions - [Command Line Interface](https://www.precursorintelligence.com/product/docker/command_line_interface): 1 vulnerability, 141 versions - [Composer Docker Image](https://www.precursorintelligence.com/product/docker/composer_docker_image): 1 vulnerability, 31 versions - [Credential Helpers](https://www.precursorintelligence.com/product/docker/credential_helpers): 1 vulnerability, 13 versions - [Crux Linux Docker Image](https://www.precursorintelligence.com/product/docker/crux_linux_docker_image): 1 vulnerability, 4 versions - [Docker-Py](https://www.precursorintelligence.com/product/docker/docker-py): 1 vulnerability, 1 version - [Memcached Docker Image](https://www.precursorintelligence.com/product/docker/memcached_docker_image): 1 vulnerability, 1 version - [Notary Docker Image](https://www.precursorintelligence.com/product/docker/notary_docker_image): 1 vulnerability, 10 versions - [Rabbitmq Docker Image](https://www.precursorintelligence.com/product/docker/rabbitmq_docker_image): 1 vulnerability, 1 version - [Registry](https://www.precursorintelligence.com/product/docker/registry): 1 vulnerability, 6 versions - [Spiped Alpine Docker Image](https://www.precursorintelligence.com/product/docker/spiped_alpine_docker_image): 1 vulnerability, 1 version - [Adminer](https://www.precursorintelligence.com/product/docker/adminer): 1 vulnerability, 10 versions - [Ghost Alpine Docker Image](https://www.precursorintelligence.com/product/docker/ghost_alpine_docker_image): 1 vulnerability, 130 versions - [Haproxy Docker Image](https://www.precursorintelligence.com/product/docker/haproxy_docker_image): 1 vulnerability, 8 versions - [Machine](https://www.precursorintelligence.com/product/docker/machine): 1 vulnerability, 30 versions - [Docker Enterprise](https://www.precursorintelligence.com/product/docker/docker_enterprise): 0 vulnerabilities, 1 version - [Spiped](https://www.precursorintelligence.com/product/docker/spiped): 0 vulnerabilities, 6 versions - [Model Runner](https://www.precursorintelligence.com/product/docker/model_runner): 0 vulnerabilities, 66 versions - [Credential-Helpers](https://www.precursorintelligence.com/product/docker/credential-helpers): 0 vulnerabilities, 13 versions - [Composer](https://www.precursorintelligence.com/product/docker/composer): 0 vulnerabilities, 31 versions - [Mcp Gateway](https://www.precursorintelligence.com/product/docker/mcp_gateway): 0 vulnerabilities, 61 versions ## Questions ### How many vulnerabilities does Docker have? Our catalogue lists 101 published vulnerabilities across 31 products and 1,184 versions from Docker. The most recent Docker flaw added to the known-exploited list is CVE-2026-102489, on 2 October 2026. ### Which Docker vulnerabilities are being exploited? 3 Docker vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2026-102489, CVE-2026-102490 and CVE-2019-15752. The full list is on this page. ### Which Docker product has the most vulnerabilities? Docker, with 53 published vulnerabilities. Its own page lists the ones known to be exploited. ### How do I get alerts for new Docker vulnerabilities? Create a Precursor Intelligence account and track the Docker products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook. ## Running Docker? Precursor Intelligence keeps checking for you: - **Tell us what you run.** Pick your software from a list, or let us work it out from your website. - **We match it to every flaw.** Over 400,000 published flaws, checked against your list. - **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it. - **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools. Start free (no card, nothing to install): https://www.precursorintelligence.com/register Book a demo: https://www.precursorintelligence.com/contact