{
  "cveId": "CVE-2026-92542",
  "url": "https://patchblox.com/security/cve/CVE-2026-92542",
  "summary": "CVE-2026-92542 is fixed in 3 products on 1 platform, first by ALAS2023-2026-3266, released November 7, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "Blind VXLAN injection into encrypted overlay networks from cluster peer",
  "description": "The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec parameters which meets the following criteria",
  "published": "2026-10-11T02:00:08Z",
  "severity": "Moderate",
  "cwe": "Authentication Bypass by Spoofing",
  "epss": 0.00068,
  "epssPercentile": 0.00029,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-92542",
  "fixes": [
    {
      "platform": "linux",
      "product": "docker",
      "release": "amzn 2023",
      "fixedVersion": "25.0.18-1.amzn2023.0.1",
      "fix": "ALAS2023-2026-3266",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3266",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "docker-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "25.0.18-1.amzn2023.0.1",
      "fix": "ALAS2023-2026-3266",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3266",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "docker-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "25.0.18-1.amzn2023.0.1",
      "fix": "ALAS2023-2026-3266",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3266",
      "released": "2026-11-07T01:06:07Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-11T13:47:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}