Docker Engine ↗
Summary iPlain-English security verdict for Docker Engine, generated from its current health score, actively-exploited vulnerabilities, and latest supported version.
Docker Engine currently scores 100/100 — healthy. 2 actively-exploited vulnerabilities (CISA KEV) affect older releases (e.g. CVE-2026-102489) — staying on the latest supported version keeps you clear of them. The latest supported release is 29.8.2. It's on the latest patch with no significant known issues — keep it current.
Disclosure trend iNew CVEs published for Docker Engine each year (NVD). A higher bar means more disclosures that year — more scrutiny, not necessarily less safe.
Patch priority — what to act on iThe issues to fix first — actively exploited (CISA KEV) first, then by exploitation probability (EPSS), then severity. Each row's "→ fixed in" is the earliest version that patches it; "see advisory" means no fixed version is published.
Most urgent first — actively exploited, then likeliest to be exploited.
CVE-2026-102489 CRITICAL exploited CWE-384 EPSS 1% → see advisory CVE-2026-102490 CRITICAL exploited Improper privilege management EPSS 1% → see advisoryGet alerted about Docker Engine
Be emailed the moment Docker Engine gets a newly exploited vulnerability (CISA KEV) or a release reaches end of life. Free · double opt-in · unsubscribe anytime.
We email only on real events for Docker Engine — no marketing, no sharing, and we never know what you run. Track your whole stack →
Versions & lifecycle iWhen each release line stops receiving security patches (end-of-life). After EOL there are no more fixes — plan upgrades before these dates.
How long each Docker Engine release line is supported — and when it sunsets. Select a line for its full report.
Full Docker Engine end-of-life dates & support timeline →
29 latest 29.8.2 Supported 29.8.2 → 28 latest 28.5.2 End of life ended 2026-05-1328.5.2 → 27 latest 27.5.1 End of life ended 2025-05-0327.5.1 → 26.1 latest 26.1.5 End of life ended 2025-02-1726.1.5 → 26.0 latest 26.0.2 End of life ended 2024-06-0826.0.2 → 25.0 latest 25.0.18 Supported until 2026-12-0425.0.18 → 24.0 latest 24.0.9 End of life ended 2024-06-0824.0.9 → 23.0 latest 23.0.18 End of life ended 2025-05-1923.0.18 → 20.10 latest 20.10.27 End of life ended 2023-12-1020.10.27 → 19.03 latest 19.03.15 End of life ended 2021-01-0819.03.15 → See all upcoming end-of-life dates →Frequently asked
Is Docker Engine safe and patched?
Docker Engine currently scores 100/100 — healthy. 2 actively-exploited vulnerabilities (CISA KEV) affect older releases (e.g. CVE-2026-102489) — staying on the latest supported version keeps you clear of them. The latest supported release is 29.8.2. It's on the latest patch with no significant known issues — keep it current.
What should I do about Docker Engine now?
Upgrade Docker Engine to the latest supported release (29.8.2) or later, which clears the actively-exploited issues affecting older versions, then confirm against Docker's official advisory.
When does Docker Engine reach end-of-life?
The latest supported Docker Engine release is 29.8.2. After end-of-life a release no longer receives security patches.
Which versions of Docker Engine are still receiving security updates?
Supported Docker Engine release lines (latest 29.8.2): 29, 25.0. End-of-life releases no longer receive security patches.
Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Docker's official advisory before you patch or upgrade — Docker Engine official site ↗