Vulnerability Reportalmalinux:8.10-minimal-20260902

almalinux:8.10-minimal-20260902
digestsha256:6cafa4a66d9a241a580cb6f2a20744f03ed1d1c4a882bb9eef81075c8131c8a8

Executive Summary

Last scanned:

Threat Score
0/100SAFE
Reputation
TRUSTED

This base/runtime image is a clean foundation for building production images. The supplied stats show 24 exposed findings and 23 post-exploit-only findings, so it is not vulnerability-free. However, exposed_count_ge6 is 0 and exposed_max_severity is 5.02, while post_count_ge6 is 0 and post_max_severity is 3.0. No CVE IDs were included in the supplied top findings, so no specific CVE-driven inherited risk can be cited from these inputs. Images built on top inherit these low-severity issues, but they do not meet the thresholds for an elevated verdict. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.

Vulnerabilities

Vulnerability Log

47 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-6791MEDIUM5.02
glibc
2.28-251.el8_10.40
fixed in 2.28-251.el8_10.43
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-77117MEDIUM5.02
glibc
2.28-251.el8_10.40
fixed in 2.28-251.el8_10.48
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-80489MEDIUM5.02
glibc
2.28-251.el8_10.40
fixed in 2.28-251.el8_10.48
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-6791MEDIUM5.02
glibc-common
2.28-251.el8_10.40
fixed in 2.28-251.el8_10.43
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-77117MEDIUM5.02
glibc-common
2.28-251.el8_10.40
fixed in 2.28-251.el8_10.48
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-80489MEDIUM5.02
glibc-common
2.28-251.el8_10.40
fixed in 2.28-251.el8_10.48
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-6791MEDIUM5.02
glibc-minimal-langpack
2.28-251.el8_10.40
fixed in 2.28-251.el8_10.43
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-77117MEDIUM5.02
glibc-minimal-langpack
2.28-251.el8_10.40
fixed in 2.28-251.el8_10.48
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-80489MEDIUM5.02
glibc-minimal-langpack
2.28-251.el8_10.40
fixed in 2.28-251.el8_10.48
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-59845MEDIUM5.02
libssh
0.9.6-16.el8_10
fixed in 0.9.6-17.el8_10
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-59845MEDIUM5.02
libssh-config
0.9.6-16.el8_10
fixed in 0.9.6-17.el8_10
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-6368MEDIUM4.67
glibc
2.28-251.el8_10.40
fixed in 2.28-251.el8_10.43
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-6368MEDIUM4.67
glibc-common
2.28-251.el8_10.40
fixed in 2.28-251.el8_10.43
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-6368MEDIUM4.67
glibc-minimal-langpack
2.28-251.el8_10.40
fixed in 2.28-251.el8_10.43
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-59848MEDIUM4.5
libssh
0.9.6-16.el8_10
fixed in 0.9.6-17.el8_10
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-59848MEDIUM4.5
libssh-config
0.9.6-16.el8_10
fixed in 0.9.6-17.el8_10
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-18374MEDIUM4.17
glibc
2.28-251.el8_10.40
fixed in 2.28-251.el8_10.48
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-18374MEDIUM4.17
glibc-common
2.28-251.el8_10.40
fixed in 2.28-251.el8_10.48
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-18374MEDIUM4.17
glibc-minimal-langpack
2.28-251.el8_10.40
fixed in 2.28-251.el8_10.48
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-19542LOW3.57
glibc
2.28-251.el8_10.40
fixed in 2.28-251.el8_10.48
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-19542LOW3.57
glibc-common
2.28-251.el8_10.40
fixed in 2.28-251.el8_10.48
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-19542LOW3.57
glibc-minimal-langpack
2.28-251.el8_10.40
fixed in 2.28-251.el8_10.48
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-59846LOW3.31
libssh
0.9.6-16.el8_10
fixed in 0.9.6-17.el8_10
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-59846LOW3.31
libssh-config
0.9.6-16.el8_10
fixed in 0.9.6-17.el8_10
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-6653LOW3
libxml2
2.9.7-21.el8_10.7
fixed in 2.9.7-21.el8_10.8
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-40468LOW2.78
gawk
4.2.1-4.el8
fixed in 4.2.1-5.el8_10
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-74860LOW2.6
libxml2
2.9.7-21.el8_10.7
fixed in 2.9.7-21.el8_10.9
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-86145LOW2.51
pcre2
10.32-3.el8_6
fixed in 10.32-4.el8_10
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-86138LOW2.39
libxml2
2.9.7-21.el8_10.7
fixed in 2.9.7-21.el8_10.9
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-86140LOW2.39
libxml2
2.9.7-21.el8_10.7
fixed in 2.9.7-21.el8_10.9
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-86142LOW2.39
libxml2
2.9.7-21.el8_10.7
fixed in 2.9.7-21.el8_10.10
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-86144LOW2.39
libxml2
2.9.7-21.el8_10.7
fixed in 2.9.7-21.el8_10.9
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-103111LOW2.33
pcre2
10.32-3.el8_6
fixed in 10.32-4.el8_10
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-40467LOW2.29
gawk
4.2.1-4.el8
fixed in 4.2.1-5.el8_10
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-59847LOW2.29
libssh
0.9.6-16.el8_10
fixed in 0.9.6-17.el8_10
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-59850LOW2.29
libssh
0.9.6-16.el8_10
fixed in 0.9.6-17.el8_10
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-59847LOW2.29
libssh-config
0.9.6-16.el8_10
fixed in 0.9.6-17.el8_10
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-59850LOW2.29
libssh-config
0.9.6-16.el8_10
fixed in 0.9.6-17.el8_10
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-89157LOW2.26
pcre2
10.32-3.el8_6
fixed in 10.32-4.el8_10
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-5278LOW2.24
coreutils-single
8.30-20.el8_10
fixed in 8.30-21.el8_10
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-86143LOW2.23
libxml2
2.9.7-21.el8_10.7
fixed in 2.9.7-21.el8_10.9
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-16118LOW2.17
glib2
2.56.4-177.el8_10
fixed in 2.56.4-178.el8_10
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-59843LOW1.99
libssh
0.9.6-16.el8_10
fixed in 0.9.6-17.el8_10
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-59844LOW1.99
libssh
0.9.6-16.el8_10
fixed in 0.9.6-17.el8_10
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-59843LOW1.99
libssh-config
0.9.6-16.el8_10
fixed in 0.9.6-17.el8_10
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-59844LOW1.99
libssh-config
0.9.6-16.el8_10
fixed in 0.9.6-17.el8_10
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-89158LOW1.99
pcre2
10.32-3.el8_6
fixed in 10.32-4.el8_10
0.2%
Theoretical Threat
Post-Exploit

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Supply chain analysis

Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.