VulnSocial

CVE-2026-92543

LOWCVSS 7.6 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Because the transport re-dials the hostname rather than the CIDR-matching address, a DNS answer set of one loopback IP plus a non-loopback attacker IP disables certificate verification and enables HTTP fallback for the registry connection.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-295CWE-319

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-10-07: 210-07
Referenced assets2 URLs
Full discourse2 posts
  • Upwind Security MDR@UpwindMDR

    🚨High - Docker Engine Insecure Registry Bypass via Any-Match DNS Loopback (CVE-2026-92543) Docker Engine’s registry client can mark a hostname as insecure if any DNS-resolved IP falls in loopback CIDRs. An attacker who can influence DNS can return 127.0.0.1 plus an attacker IP, triggering insecure mode to skip TLS cert verification and fall back to HTTP, exposing registry creds and enabling image substitution. 👉Affected: Docker Engine < 29.8.2 | http://github.com/moby/moby/v2 < v2.0.0-beta.25 | Fixed: Docker Engine 29.8.2 / Moby v2.0.0-beta.25

    0000061
    312 followersView on X
  • VulniPulse@vulnipulse

    CVE advisory (HIGH): CVE-2026-92543 - docker: Docker Engine insecure-registry fallback via malicious DNS responses. https://vulnipulse.com/advisories/docker-cve-2026-92543 #CVE #CyberSecurity #Docker #DockerEngine

    0000027
    7 followersView on X

Explore more

Back to dashboard