Vulnerability Reportalmalinux:8.10-20260524

almalinux:8.10-20260524
digestsha256:a21319867411d73b8dc340e5eddeb0c7148df4f6e1b30fe20b40791589ac3a8a

Executive Summary

Last scanned:

Threat Score
0/100SAFE
Reputation
TRUSTED

This base/runtime image is a clean foundation for building production images. It does carry a modest number of low-severity findings (17 exposed, 28 post-exploit-only), but their maximum severity is below the threshold for concern. These findings do not affect the verdict because they are low impact and present limited practical attack surface. As a building block, this image provides a solid foundation without introducing critical or high-severity risks that would require remediation before use. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.

Vulnerabilities

Vulnerability Log

45 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-42014MEDIUM5.61
gnutls
3.6.16-8.el8_10.5
fixed in 3.6.16-8.el8_10.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2024-34459MEDIUM5.5
libxml2
2.9.7-21.el8_10.4
fixed in 2.9.7-21.el8_10.5
2.3%
Low-Moderate Risk
Directly Exposed
CVE-2026-54370MEDIUM5.35
libacl
2.2.53-3.el8
fixed in 2.4.0-1.el8_10
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-5435MEDIUM5.02
glibc
2.28-251.el8_10.34
fixed in 2.28-251.el8_10.40
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-5435MEDIUM5.02
glibc-common
2.28-251.el8_10.34
fixed in 2.28-251.el8_10.40
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-5435MEDIUM5.02
glibc-minimal-langpack
2.28-251.el8_10.34
fixed in 2.28-251.el8_10.40
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-4046MEDIUM4.5
glibc
2.28-251.el8_10.34
fixed in 2.28-251.el8_10.37
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-4046MEDIUM4.5
glibc-common
2.28-251.el8_10.34
fixed in 2.28-251.el8_10.37
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-4046MEDIUM4.5
glibc-minimal-langpack
2.28-251.el8_10.34
fixed in 2.28-251.el8_10.37
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42015MEDIUM4.5
gnutls
3.6.16-8.el8_10.5
fixed in 3.6.16-8.el8_10.6
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-5450MEDIUM4.25
glibc
2.28-251.el8_10.34
fixed in 2.28-251.el8_10.38
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-5928MEDIUM4.25
glibc
2.28-251.el8_10.34
fixed in 2.28-251.el8_10.40
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-5450MEDIUM4.25
glibc-common
2.28-251.el8_10.34
fixed in 2.28-251.el8_10.38
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-5928MEDIUM4.25
glibc-common
2.28-251.el8_10.34
fixed in 2.28-251.el8_10.40
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-5450MEDIUM4.25
glibc-minimal-langpack
2.28-251.el8_10.34
fixed in 2.28-251.el8_10.38
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-5928MEDIUM4.25
glibc-minimal-langpack
2.28-251.el8_10.34
fixed in 2.28-251.el8_10.40
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-55693LOW3.98
vim-minimal
2:8.0.1763-22.el8_10.3
fixed in 2:8.0.1763-31.el8_10
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-57455LOW3.98
vim-minimal
2:8.0.1763-22.el8_10.3
fixed in 2:8.0.1763-31.el8_10
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-57456LOW3.98
vim-minimal
2:8.0.1763-22.el8_10.3
fixed in 2:8.0.1763-31.el8_10
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-59858LOW3.98
vim-minimal
2:8.0.1763-22.el8_10.3
fixed in 2:8.0.1763-31.el8_10
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-41411LOW3.72
vim-minimal
2:8.0.1763-22.el8_10.3
fixed in 2:8.0.1763-24.el8_10
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-54369LOW3.62
acl
2.2.53-3.el8
fixed in 2.4.0-1.el8_10
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-35177LOW3.62
vim-minimal
2:8.0.1763-22.el8_10.3
fixed in 2:8.0.1763-23.el8_10
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-42010LOW3.53
gnutls
3.6.16-8.el8_10.5
fixed in 3.6.16-8.el8_10.6
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-54370LOW3.21
acl
2.2.53-3.el8
fixed in 2.4.0-1.el8_10
<0.1%
Theoretical Threat
Post-Exploit
CVE-2026-45447LOW2.92
openssl-libs
1:1.1.1k-15.el8_6
fixed in 1:1.1.1k-16.el8_6
5.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-58016LOW2.78
glib2
2.56.4-169.el8_10
fixed in 2.56.4-170.el8_10
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-33845LOW2.78
gnutls
3.6.16-8.el8_10.5
fixed in 3.6.16-8.el8_10.6
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-33846LOW2.7
gnutls
3.6.16-8.el8_10.5
fixed in 3.6.16-8.el8_10.6
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2026-42009LOW2.7
gnutls
3.6.16-8.el8_10.5
fixed in 3.6.16-8.el8_10.6
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2026-28390LOW2.7
openssl-libs
1:1.1.1k-15.el8_6
fixed in 1:1.1.1k-17.el8_6
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-42013LOW2.51
gnutls
3.6.16-8.el8_10.5
fixed in 3.6.16-8.el8_10.6
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-5260LOW2.51
gnutls
3.6.16-8.el8_10.5
fixed in 3.6.16-8.el8_10.6
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-48864LOW2.39
libsolv
0.7.20-6.el8
fixed in 0.7.20-7.el8_10
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-45186LOW2.29
expat
2.5.0-1.el8_10
fixed in 2.5.0-2.el8_10
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-3833LOW2.26
gnutls
3.6.16-8.el8_10.5
fixed in 3.6.16-8.el8_10.6
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-42011LOW2.26
gnutls
3.6.16-8.el8_10.5
fixed in 3.6.16-8.el8_10.6
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-42012LOW2.17
gnutls
3.6.16-8.el8_10.5
fixed in 3.6.16-8.el8_10.6
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-54369LOW2.17
libacl
2.2.53-3.el8
fixed in 2.4.0-1.el8_10
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-13151LOW2.12
libtasn1
4.13-5.el8_10
fixed in 4.13-6.el8_10
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2025-6170LOW2.12
libxml2
2.9.7-21.el8_10.4
fixed in 2.9.7-21.el8_10.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2024-4741LOW2.02
openssl-libs
1:1.1.1k-15.el8_6
fixed in 1:1.1.1k-16.el8_6
2.9%
Low-Moderate Risk
Post-Exploit
CVE-2026-6238LOW1.99
glibc
2.28-251.el8_10.34
fixed in 2.28-251.el8_10.40
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-6238LOW1.99
glibc-common
2.28-251.el8_10.34
fixed in 2.28-251.el8_10.40
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-6238LOW1.99
glibc-minimal-langpack
2.28-251.el8_10.34
fixed in 2.28-251.el8_10.40
0.4%
Theoretical Threat
Post-Exploit

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Supply chain analysis

Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.