Docker Engine has a vulnerability (CVE-2026-92543) where its handling of insecure registry hostnames can be bypassed due to improper DNS and CIDR matching logic. This flaw allows an attacker to disable certificate verification and enable HTTP fallback by manipulating DNS responses to include both loopback and attacker IP addresses.