Last scanned:
This base/runtime image is a clean foundation for building production images. It does contain vulnerabilities, including 148 exposed-surface findings and 17 post-exploitation-only findings, but none are known to be actively exploited and the highest severity found is 5.9. Because these issues are low in severity and not tied to any exposed service in this image, they do not change the verdict. Images built on top of it should still apply their normal patching cadence and run as a non-root user. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.
Already in good shape · 3 hardening steps left
| CVE ID | Adjusted Severity | Package | Exploit Probability | Risk Context |
|---|---|---|---|---|
| CVE-2026-5435 | MEDIUM5.9 | glibc 2.34-231.el9_7.10 fixed in 2.34-274.el9_8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-6791 | MEDIUM5.9 | glibc 2.34-231.el9_7.10 fixed in 2.34-283.el9_8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-77117 | MEDIUM5.9 | glibc 2.34-231.el9_7.10 fixed in 2.34-283.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-80489 | MEDIUM5.9 | glibc 2.34-231.el9_7.10 fixed in 2.34-283.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-5435 | MEDIUM5.9 | glibc-common 2.34-231.el9_7.10 fixed in 2.34-274.el9_8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-6791 | MEDIUM5.9 | glibc-common 2.34-231.el9_7.10 fixed in 2.34-283.el9_8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-77117 | MEDIUM5.9 | glibc-common 2.34-231.el9_7.10 fixed in 2.34-283.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-80489 | MEDIUM5.9 | glibc-common 2.34-231.el9_7.10 fixed in 2.34-283.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-5435 | MEDIUM5.9 | glibc-minimal-langpack 2.34-231.el9_7.10 fixed in 2.34-274.el9_8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-6791 | MEDIUM5.9 | glibc-minimal-langpack 2.34-231.el9_7.10 fixed in 2.34-283.el9_8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-77117 | MEDIUM5.9 | glibc-minimal-langpack 2.34-231.el9_7.10 fixed in 2.34-283.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-80489 | MEDIUM5.9 | glibc-minimal-langpack 2.34-231.el9_7.10 fixed in 2.34-283.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-42764 | MEDIUM5.9 | openssl-libs 1:3.5.1-7.el9_7 fixed in 1:3.5.5-4.el9_8 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2026-42769 | MEDIUM5.9 | openssl-libs 1:3.5.1-7.el9_7 fixed in 1:3.5.5-4.el9_8 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-42770 | MEDIUM5.9 | openssl-libs 1:3.5.1-7.el9_7 fixed in 1:3.5.5-4.el9_8 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-63073 | MEDIUM5.9 | openssl-libs 1:3.5.1-7.el9_7 fixed in 1:3.5.8-1.el9_8 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2026-9076 | MEDIUM5.9 | openssl-libs 1:3.5.1-7.el9_7 fixed in 1:3.5.5-4.el9_8 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-31790 | MEDIUM5.9 | openssl-libs 1:3.5.1-7.el9_7 fixed in 1:3.5.5-2.el9_8 | 1.0% Low-Moderate Risk | Directly Exposed |
| CVE-2026-6368 | MEDIUM5.5 | glibc 2.34-231.el9_7.10 fixed in 2.34-283.el9_8 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-6368 | MEDIUM5.5 | glibc-common 2.34-231.el9_7.10 fixed in 2.34-283.el9_8 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-6368 | MEDIUM5.5 | glibc-minimal-langpack 2.34-231.el9_7.10 fixed in 2.34-283.el9_8 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-7383 | MEDIUM5.5 | openssl-libs 1:3.5.1-7.el9_7 fixed in 1:3.5.5-4.el9_8 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-58016 | MEDIUM5.34 | glib2 2.68.4-18.el9_7.1 fixed in 2.68.4-19.el9_8.2 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-33845 | MEDIUM5.34 | gnutls 3.8.3-10.el9_7 fixed in 3.8.10-4.el9_8 | 2.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-42010 | MEDIUM5.34 | gnutls 3.8.3-10.el9_7 fixed in 3.8.10-4.el9_8 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-45445 | MEDIUM5.34 | openssl-libs 1:3.5.1-7.el9_7 fixed in 1:3.5.5-4.el9_8 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-4046 | MEDIUM5.3 | glibc 2.34-231.el9_7.10 fixed in 2.34-270.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-4046 | MEDIUM5.3 | glibc-common 2.34-231.el9_7.10 fixed in 2.34-270.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-4046 | MEDIUM5.3 | glibc-minimal-langpack 2.34-231.el9_7.10 fixed in 2.34-270.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-42766 | MEDIUM5.3 | openssl-libs 1:3.5.1-7.el9_7 fixed in 1:3.5.5-4.el9_8 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-42767 | MEDIUM5.3 | openssl-libs 1:3.5.1-7.el9_7 fixed in 1:3.5.5-4.el9_8 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-63387 | MEDIUM5.16 | libevent 2.1.12-8.el9_4 fixed in 2.1.13-1.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-74860 | MEDIUM5.1 | libxml2 2.9.13-14.el9_7 fixed in 2.9.13-14.el9_8.5 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-63388 | MEDIUM5.04 | libevent 2.1.12-8.el9_4 fixed in 2.1.13-1.el9_8 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-5450 | MEDIUM5 | glibc 2.34-231.el9_7.10 fixed in 2.34-272.el9_8 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-5928 | MEDIUM5 | glibc 2.34-231.el9_7.10 fixed in 2.34-274.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-5450 | MEDIUM5 | glibc-common 2.34-231.el9_7.10 fixed in 2.34-272.el9_8 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-5928 | MEDIUM5 | glibc-common 2.34-231.el9_7.10 fixed in 2.34-274.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-5450 | MEDIUM5 | glibc-minimal-langpack 2.34-231.el9_7.10 fixed in 2.34-272.el9_8 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-5928 | MEDIUM5 | glibc-minimal-langpack 2.34-231.el9_7.10 fixed in 2.34-274.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-34180 | MEDIUM5 | openssl-libs 1:3.5.1-7.el9_7 fixed in 1:3.5.5-4.el9_8 | 1.0% Low-Moderate Risk | Directly Exposed |
| CVE-2026-42013 | MEDIUM4.92 | gnutls 3.8.3-10.el9_7 fixed in 3.8.10-4.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-5260 | MEDIUM4.92 | gnutls 3.8.3-10.el9_7 fixed in 3.8.10-4.el9_8 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-86145 | MEDIUM4.92 | pcre2 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-86145 | MEDIUM4.92 | pcre2-syntax 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-18374 | MEDIUM4.9 | glibc 2.34-231.el9_7.10 fixed in 2.34-283.el9_8 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-18374 | MEDIUM4.9 | glibc-common 2.34-231.el9_7.10 fixed in 2.34-283.el9_8 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-18374 | MEDIUM4.9 | glibc-minimal-langpack 2.34-231.el9_7.10 fixed in 2.34-283.el9_8 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-45447 | MEDIUM4.86 | openssl-libs 1:3.5.1-7.el9_7 fixed in 1:3.5.5-4.el9_8 | 4.0% Low-Moderate Risk | Directly Exposed |
| CVE-2026-86138 | MEDIUM4.68 | libxml2 2.9.13-14.el9_7 fixed in 2.9.13-14.el9_8.5 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-86140 | MEDIUM4.68 | libxml2 2.9.13-14.el9_7 fixed in 2.9.13-14.el9_8.5 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-86142 | MEDIUM4.68 | libxml2 2.9.13-14.el9_7 fixed in 2.9.13-14.el9_8.5 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-86144 | MEDIUM4.68 | libxml2 2.9.13-14.el9_7 fixed in 2.9.13-14.el9_8.5 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-89161 | MEDIUM4.68 | pcre2 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-89161 | MEDIUM4.68 | pcre2-syntax 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-11822 | MEDIUM4.68 | sqlite-libs 3.34.1-9.el9_7 fixed in 3.34.1-11.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-11824 | MEDIUM4.68 | sqlite-libs 3.34.1-9.el9_7 fixed in 3.34.1-11.el9_8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-63382 | MEDIUM4.62 | libevent 2.1.12-8.el9_4 fixed in 2.1.13-1.el9_8 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-63385 | MEDIUM4.62 | libevent 2.1.12-8.el9_4 fixed in 2.1.13-1.el9_8 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-103111 | MEDIUM4.56 | pcre2 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-103111 | MEDIUM4.56 | pcre2-syntax 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-33846 | MEDIUM4.5 | gnutls 3.8.3-10.el9_7 fixed in 3.8.10-4.el9_8 | 1.3% Low-Moderate Risk | Directly Exposed |
| CVE-2026-42009 | MEDIUM4.5 | gnutls 3.8.3-10.el9_7 fixed in 3.8.10-4.el9_8 | 1.3% Low-Moderate Risk | Directly Exposed |
| CVE-2026-40355 | MEDIUM4.5 | krb5-libs 1.21.1-8.el9_6 fixed in 1.21.1-10.el9_8 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-40356 | MEDIUM4.5 | krb5-libs 1.21.1-8.el9_6 fixed in 1.21.1-10.el9_8 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-4424 | MEDIUM4.5 | libarchive 3.5.3-7.el9_7 fixed in 3.5.3-9.el9_7 | 1.3% Low-Moderate Risk | Directly Exposed |
| CVE-2026-5121 | MEDIUM4.5 | libarchive 3.5.3-7.el9_7 fixed in 3.5.3-9.el9_7 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-63383 | MEDIUM4.5 | libevent 2.1.12-8.el9_4 fixed in 2.1.13-1.el9_8 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-63384 | MEDIUM4.5 | libevent 2.1.12-8.el9_4 fixed in 2.1.13-1.el9_8 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-27135 | MEDIUM4.5 | libnghttp2 1.43.0-6.el9 fixed in 1.43.0-6.el9_7.1 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-14456 | MEDIUM4.5 | openssl-libs 1:3.5.1-7.el9_7 fixed in 1:3.5.8-1.el9_8 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-14457 | MEDIUM4.5 | openssl-libs 1:3.5.1-7.el9_7 fixed in 1:3.5.8-1.el9_8 | 1.2% Low-Moderate Risk | Directly Exposed |
| CVE-2026-18798 | MEDIUM4.5 | openssl-libs 1:3.5.1-7.el9_7 fixed in 1:3.5.8-1.el9_8 | 1.7% Low-Moderate Risk | Directly Exposed |
| CVE-2026-34183 | MEDIUM4.5 | openssl-libs 1:3.5.1-7.el9_7 fixed in 1:3.5.5-4.el9_8 | 1.0% Low-Moderate Risk | Directly Exposed |
| CVE-2026-54874 | MEDIUM4.5 | openssl-libs 1:3.5.1-7.el9_7 fixed in 1:3.5.8-1.el9_8 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-63074 | MEDIUM4.5 | openssl-libs 1:3.5.1-7.el9_7 fixed in 1:3.5.8-1.el9_8 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-63075 | MEDIUM4.5 | openssl-libs 1:3.5.1-7.el9_7 fixed in 1:3.5.8-1.el9_8 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-63076 | MEDIUM4.5 | openssl-libs 1:3.5.1-7.el9_7 fixed in 1:3.5.8-1.el9_8 | 1.6% Low-Moderate Risk | Directly Exposed |
| CVE-2026-3833 | MEDIUM4.44 | gnutls 3.8.3-10.el9_7 fixed in 3.8.10-4.el9_8 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-42011 | MEDIUM4.44 | gnutls 3.8.3-10.el9_7 fixed in 3.8.10-4.el9_8 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-34182 | MEDIUM4.44 | openssl-libs 1:3.5.1-7.el9_7 fixed in 1:3.5.5-4.el9_8 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-89157 | MEDIUM4.44 | pcre2 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-89157 | MEDIUM4.44 | pcre2-syntax 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-86143 | MEDIUM4.38 | libxml2 2.9.13-14.el9_7 fixed in 2.9.13-14.el9_8.5 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-42012 | MEDIUM4.26 | gnutls 3.8.3-10.el9_7 fixed in 3.8.10-4.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-54369 | MEDIUM4.26 | libacl 2.3.1-4.el9 fixed in 2.4.0-1.el9_8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-4878 | MEDIUM4.2 | libcap 2.48-10.el9 fixed in 2.48-10.el9_8.1 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-19542 | MEDIUM4.2 | glibc 2.34-231.el9_7.10 fixed in 2.34-283.el9_8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-19542 | MEDIUM4.2 | glibc-common 2.34-231.el9_7.10 fixed in 2.34-283.el9_8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-19542 | MEDIUM4.2 | glibc-minimal-langpack 2.34-231.el9_7.10 fixed in 2.34-283.el9_8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-14087 | MEDIUM4.14 | glib2 2.68.4-18.el9_7.1 fixed in 2.68.4-19.el9_8.1 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-16118 | MEDIUM4.14 | glib2 2.68.4-18.el9_7.1 fixed in 2.68.4-19.el9_8.10 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-58010 | MEDIUM4.14 | glib2 2.68.4-18.el9_7.1 fixed in 2.68.4-19.el9_8.9 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-58011 | MEDIUM4.14 | glib2 2.68.4-18.el9_7.1 fixed in 2.68.4-19.el9_8.9 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-58012 | MEDIUM4.14 | glib2 2.68.4-18.el9_7.1 fixed in 2.68.4-19.el9_8.9 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-58013 | MEDIUM4.14 | glib2 2.68.4-18.el9_7.1 fixed in 2.68.4-19.el9_8.9 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-58014 | MEDIUM4.14 | glib2 2.68.4-18.el9_7.1 fixed in 2.68.4-19.el9_8.9 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-58015 | MEDIUM4.14 | glib2 2.68.4-18.el9_7.1 fixed in 2.68.4-19.el9_8.9 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-14164 | MEDIUM4.14 | libarchive 3.5.3-7.el9_7 fixed in 3.5.3-11.el9_8 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-41989 | MEDIUM4.14 | libgcrypt 1.10.0-11.el9 fixed in 1.10.0-13.el9_8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-48864 | MEDIUM4.14 | libsolv 0.7.24-3.el9 fixed in 0.7.24-6.el9_8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-11979 | MEDIUM4.14 | libxml2 2.9.13-14.el9_7 fixed in 2.9.13-14.el9_8.4 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-6653 | MEDIUM4.14 | libxml2 2.9.13-14.el9_7 fixed in 2.9.13-14.el9_8.4 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-28390 | MEDIUM4.14 | openssl-libs 1:3.5.1-7.el9_7 fixed in 1:3.5.5-3.el9_8 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-63072 | MEDIUM4.14 | openssl-libs 1:3.5.1-7.el9_7 fixed in 1:3.5.8-1.el9_8 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2026-84782 | MEDIUM4.14 | openssl-libs 1:3.5.1-7.el9_7 fixed in 1:3.5.8-2.el9_8 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-2100 | MEDIUM4.14 | p11-kit 0.25.3-3.el9_5 fixed in 0.26.2-1.el9 | 1.3% Low-Moderate Risk | Directly Exposed |
| CVE-2026-2100 | MEDIUM4.14 | p11-kit-trust 0.25.3-3.el9_5 fixed in 0.26.2-1.el9 | 1.3% Low-Moderate Risk | Directly Exposed |
| CVE-2026-29111 | MEDIUM4.14 | systemd-libs 252-55.el9_7.7.alma.1 fixed in 252-67.el9_8.2.alma.1 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-114406 | MEDIUM4.08 | ca-certificates 2025.2.80_v9.0.305-91.el9 fixed in 2026.2.92_v9.0.319-90.3.el9_8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-4438 | MEDIUM4 | glibc 2.34-231.el9_7.10 fixed in 2.34-270.el9_8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-4438 | MEDIUM4 | glibc-common 2.34-231.el9_7.10 fixed in 2.34-270.el9_8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-4438 | MEDIUM4 | glibc-minimal-langpack 2.34-231.el9_7.10 fixed in 2.34-270.el9_8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-42014 | LOW3.96 | gnutls 3.8.3-10.el9_7 fixed in 3.8.10-4.el9_8 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-63381 | LOW3.96 | libevent 2.1.12-8.el9_4 fixed in 2.1.13-1.el9_8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-14512 | LOW3.9 | glib2 2.68.4-18.el9_7.1 fixed in 2.68.4-19.el9_8.1 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-4437 | LOW3.9 | glibc 2.34-231.el9_7.10 fixed in 2.34-270.el9_8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-6238 | LOW3.9 | glibc 2.34-231.el9_7.10 fixed in 2.34-274.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-4437 | LOW3.9 | glibc-common 2.34-231.el9_7.10 fixed in 2.34-270.el9_8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-6238 | LOW3.9 | glibc-common 2.34-231.el9_7.10 fixed in 2.34-274.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-4437 | LOW3.9 | glibc-minimal-langpack 2.34-231.el9_7.10 fixed in 2.34-270.el9_8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-6238 | LOW3.9 | glibc-minimal-langpack 2.34-231.el9_7.10 fixed in 2.34-274.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-63379 | LOW3.9 | libevent 2.1.12-8.el9_4 fixed in 2.1.13-1.el9_8 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-89158 | LOW3.9 | pcre2 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-89160 | LOW3.9 | pcre2 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-89158 | LOW3.9 | pcre2-syntax 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-89160 | LOW3.9 | pcre2-syntax 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-13151 | LOW3.9 | libtasn1 4.16.0-9.el9 fixed in 4.16.0-10.el9_8 | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2026-54370 | LOW3.78 | libacl 2.3.1-4.el9 fixed in 2.4.0-1.el9_8 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-54371 | LOW3.78 | libattr 2.5.1-3.el9 fixed in 2.6.0-1.el9_8 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-34181 | LOW3.78 | openssl-libs 1:3.5.1-7.el9_7 fixed in 1:3.5.5-4.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-42768 | LOW3.78 | openssl-libs 1:3.5.1-7.el9_7 fixed in 1:3.5.5-4.el9_8 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-13757 | LOW3.72 | p11-kit 0.25.3-3.el9_5 fixed in 0.26.4-1.el9_8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-13757 | LOW3.72 | p11-kit-trust 0.25.3-3.el9_5 fixed in 0.26.4-1.el9_8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-45446 | LOW3.7 | openssl-libs 1:3.5.1-7.el9_7 fixed in 1:3.5.5-4.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-56392 | LOW3.66 | coreutils-single 8.32-39.el9 fixed in 8.32-41.el9_8.1 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-89156 | LOW3.54 | pcre2 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-89156 | LOW3.54 | pcre2-syntax 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-3783 | LOW3.42 | curl-minimal 7.76.1-35.el9_7.3 fixed in 7.76.1-40.el9_8.5 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-3783 | LOW3.42 | libcurl-minimal 7.76.1-35.el9_7.3 fixed in 7.76.1-40.el9_8.5 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-58055 | LOW3.24 | libnghttp2 1.43.0-6.el9 fixed in 1.43.0-6.el9_8.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-15588 | LOW3.18 | glib2 2.68.4-18.el9_7.1 fixed in 2.68.4-19.el9_8.9 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-42015 | LOW3.18 | gnutls 3.8.3-10.el9_7 fixed in 3.8.10-4.el9_8 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-8286 | LOW2.92 | curl-minimal 7.76.1-35.el9_7.3 fixed in 7.76.1-40.el9_8.5 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-8458 | LOW2.92 | curl-minimal 7.76.1-35.el9_7.3 fixed in 7.76.1-40.el9_8.7 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-8286 | LOW2.92 | libcurl-minimal 7.76.1-35.el9_7.3 fixed in 7.76.1-40.el9_8.5 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-8458 | LOW2.92 | libcurl-minimal 7.76.1-35.el9_7.3 fixed in 7.76.1-40.el9_8.7 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-8927 | LOW2.7 | curl-minimal 7.76.1-35.el9_7.3 fixed in 7.76.1-40.el9_8.7 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-8927 | LOW2.7 | libcurl-minimal 7.76.1-35.el9_7.3 fixed in 7.76.1-40.el9_8.7 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-9547 | LOW2.66 | curl-minimal 7.76.1-35.el9_7.3 fixed in 7.76.1-40.el9_8.5 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-9547 | LOW2.66 | libcurl-minimal 7.76.1-35.el9_7.3 fixed in 7.76.1-40.el9_8.5 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-40467 | LOW2.48 | gawk 5.1.0-6.el9 fixed in 5.1.0-6.el9_8.1 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-40468 | LOW2.48 | gawk 5.1.0-6.el9 fixed in 5.1.0-6.el9_8.1 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-40553 | LOW2.48 | gawk 5.1.0-6.el9 fixed in 5.1.0-6.el9_8.1 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-1965 | LOW2.45 | curl-minimal 7.76.1-35.el9_7.3 fixed in 7.76.1-40.el9_8.5 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-1965 | LOW2.45 | libcurl-minimal 7.76.1-35.el9_7.3 fixed in 7.76.1-40.el9_8.5 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-11856 | LOW2.34 | curl-minimal 7.76.1-35.el9_7.3 fixed in 7.76.1-40.el9_8.8 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2026-8924 | LOW2.34 | curl-minimal 7.76.1-35.el9_7.3 fixed in 7.76.1-40.el9_8.8 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2026-11856 | LOW2.34 | libcurl-minimal 7.76.1-35.el9_7.3 fixed in 7.76.1-40.el9_8.8 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2026-8924 | LOW2.34 | libcurl-minimal 7.76.1-35.el9_7.3 fixed in 7.76.1-40.el9_8.8 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2024-34459 | LOW2.34 | libxml2 2.9.13-14.el9_7 fixed in 2.9.13-14.el9_8.1 | 1.8% Low-Moderate Risk | Directly Exposed |
| CVE-2025-5278 | LOW2.24 | coreutils-single 8.32-39.el9 fixed in 8.32-41.el9_8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-3832 | LOW2.22 | gnutls 3.8.3-10.el9_7 fixed in 3.8.10-4.el9_8 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-5419 | LOW2.22 | gnutls 3.8.3-10.el9_7 fixed in 3.8.10-4.el9_8 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2025-6170 | LOW1.27 | libxml2 2.9.13-14.el9_7 fixed in 2.9.13-14.el9_8.2 | 0.3% Theoretical Threat | Directly Exposed |
Want to check another image? Run a full scan with the Docker Security Scanner.