Docker Desktop Privilege Escalation Vulnerability WID-SEC-2026-1259 CVSS 8.8

Summary

CERT-Bund published security advisory WID-SEC-2026-1259 on 23 April 2026 disclosing a privilege escalation vulnerability in Docker Desktop affecting versions below 4.59.0. The vulnerability carries a CVSS Base Score of 8.8 (high) and a Temporal Score of 7.7. No remote attack vector is required for exploitation. A mitigation is available, and organisations running Docker Desktop should update to version 4.59.0 or later to remediate the flaw.

About this source

CERT-Bund is the German federal cybersecurity agency's incident response team, run by the BSI. Their advisory feed publishes vulnerability disclosures and active exploitation warnings for software in widespread enterprise use: VPN appliances, email servers, file transfer products, ERP systems, browsers, hypervisors. Around 280 advisories a month, each with a CVSS score, affected versions, and remediation guidance. The advisories are written in German but cover the same vulnerabilities that show up in CISA, NCSC-UK, and JPCERT bulletins, often hours earlier. Watch this if you patch enterprise software, run a SOC, or write detection rules. GovPing publishes each advisory with the affected vendor, CVSS score, and original CERT-Bund link.

What changed

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

Related changes

Microsoft ASP.NET Privilege Escalation Vulnerability, CVSS 9.1 Critical

Urgent Apr 22, 2026 • CERT-Bund Security Advisories • Data Privacy & Cybersecurity

Erlang/OTP Information Disclosure Vulnerability, CVSS 5.4

Priority review Apr 23, 2026 • CERT-Bund Security Advisories • Data Privacy & Cybersecurity

Drupal Obfuscate XSS Vulnerability, CVSS 4.6 Medium, 22nd Apr

Priority review Apr 23, 2026 • CERT-Bund Security Advisories • Data Privacy & Cybersecurity