Is Docker Engine 26.1.0 affected?

CVSS 9.9

8 known vulnerabilities affect 26.1.0 (highest CVSS 9.9).

Your branch 26.1 has reached end of life (Feb 17, 2025).

72 newer releases in its track, up to 29.9.2. What changed up to 29.9.2

Vulnerabilities affecting 26.1.0

9.9
CVE-2024-41110 Authz zero length regression
8.8
CVE-2026-34040 AuthZ plugin bypass with oversized request body fixed in 29.3.1
7.6
CVE-2026-92543 Docker Engine insecure-registry fallback via malicious DNS responses fixed in 29.8.2
7.2
CVE-2026-42306 Race condition in docker cp allows bind mount redirection to host path fixed in 29.5.1
7.2
CVE-2026-41567 `PUT /containers/{id}/archive` executes container binary on the host fixed in 29.5.1
6.8
CVE-2026-33997 Off-by-one error in plugin privilege validation fixed in 29.3.1
6.1
CVE-2026-41568 Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap fixed in 29.5.1
3.3
CVE-2025-54410 Firewalld reload removes bridge network isolation fixed in 28.0.0