Vulnerability Reportalmalinux:9.8-20260526

almalinux:9.8-20260526
digestsha256:9b719dc3150c74fd71bd24659b780ec41f5e7166dd24b7d92904125d4f63c65f

Executive Summary

Last scanned:

Threat Score
0/100NEEDS ATTENTION
Reputation
TRUSTED

AI verdict failed due to an error.

Vulnerabilities

Vulnerability Log

85 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-45447MEDIUM4.86
openssl
1:3.5.5-2.el9_8
fixed in 1:3.5.5-4.el9_8
5.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-45445MEDIUM4.64
openssl
1:3.5.5-2.el9_8
fixed in 1:3.5.5-4.el9_8
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-34183MEDIUM4.5
openssl
1:3.5.5-2.el9_8
fixed in 1:3.5.5-4.el9_8
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-28390MEDIUM4.5
openssl
1:3.5.5-2.el9_8
fixed in 1:3.5.5-3.el9_8
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-34182LOW3.77
openssl
1:3.5.5-2.el9_8
fixed in 1:3.5.5-4.el9_8
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-42764LOW3.54
openssl
1:3.5.5-2.el9_8
fixed in 1:3.5.5-4.el9_8
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-34181LOW3.21
openssl
1:3.5.5-2.el9_8
fixed in 1:3.5.5-4.el9_8
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-42768LOW3.21
openssl
1:3.5.5-2.el9_8
fixed in 1:3.5.5-4.el9_8
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-42769LOW3.01
openssl
1:3.5.5-2.el9_8
fixed in 1:3.5.5-4.el9_8
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-42770LOW3.01
openssl
1:3.5.5-2.el9_8
fixed in 1:3.5.5-4.el9_8
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-9076LOW3.01
openssl
1:3.5.5-2.el9_8
fixed in 1:3.5.5-4.el9_8
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-34180LOW3
openssl
1:3.5.5-2.el9_8
fixed in 1:3.5.5-4.el9_8
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-7383LOW2.8
openssl
1:3.5.5-2.el9_8
fixed in 1:3.5.5-4.el9_8
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-42766LOW2.7
openssl
1:3.5.5-2.el9_8
fixed in 1:3.5.5-4.el9_8
1.0%
Theoretical Threat
Post-Exploit
CVE-2026-42767LOW2.7
openssl
1:3.5.5-2.el9_8
fixed in 1:3.5.5-4.el9_8
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-45446LOW1.89
openssl
1:3.5.5-2.el9_8
fixed in 1:3.5.5-4.el9_8
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-42010NONE0
gnutls
3.8.10-3.el9
fixed in 3.8.10-4.el9_8
1.1%
Low-Moderate Risk
Not Applicable
CVE-2026-58016NONE0
glib2
2.68.4-19.el9_8.1
fixed in 2.68.4-19.el9_8.2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-33845NONE0
gnutls
3.8.10-3.el9
fixed in 3.8.10-4.el9_8
0.8%
Theoretical Threat
Not Applicable
CVE-2026-45445NONE0
openssl-libs
1:3.5.5-2.el9_8
fixed in 1:3.5.5-4.el9_8
0.6%
Theoretical Threat
Not Applicable
CVE-2026-42013NONE0
gnutls
3.8.10-3.el9
fixed in 3.8.10-4.el9_8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-5260NONE0
gnutls
3.8.10-3.el9
fixed in 3.8.10-4.el9_8
0.7%
Theoretical Threat
Not Applicable
CVE-2026-45447NONE0
openssl-libs
1:3.5.5-2.el9_8
fixed in 1:3.5.5-4.el9_8
5.2%
Low-Moderate Risk
Not Applicable
CVE-2026-48864NONE0
libsolv
0.7.24-4.el9
fixed in 0.7.24-6.el9_8
0.2%
Theoretical Threat
Not Applicable
CVE-2026-55693NONE0
vim-minimal
2:8.2.2637-26.el9_8.4
fixed in 2:8.2.2637-26.el9_8.13
0.1%
Theoretical Threat
Not Applicable
CVE-2026-57455NONE0
vim-minimal
2:8.2.2637-26.el9_8.4
fixed in 2:8.2.2637-26.el9_8.13
0.1%
Theoretical Threat
Not Applicable
CVE-2026-57456NONE0
vim-minimal
2:8.2.2637-26.el9_8.4
fixed in 2:8.2.2637-26.el9_8.13
0.1%
Theoretical Threat
Not Applicable
CVE-2026-59856NONE0
vim-minimal
2:8.2.2637-26.el9_8.4
fixed in 2:8.2.2637-26.el9_8.13
0.2%
Theoretical Threat
Not Applicable
CVE-2026-59858NONE0
vim-minimal
2:8.2.2637-26.el9_8.4
fixed in 2:8.2.2637-26.el9_8.13
0.1%
Theoretical Threat
Not Applicable
CVE-2026-45186NONE0
expat
2.5.0-6.el9
fixed in 2.5.0-6.el9_8.1
0.4%
Theoretical Threat
Not Applicable
CVE-2026-33846NONE0
gnutls
3.8.10-3.el9
fixed in 3.8.10-4.el9_8
1.3%
Low-Moderate Risk
Not Applicable
CVE-2026-42009NONE0
gnutls
3.8.10-3.el9
fixed in 3.8.10-4.el9_8
1.3%
Low-Moderate Risk
Not Applicable
CVE-2026-34183NONE0
openssl-libs
1:3.5.5-2.el9_8
fixed in 1:3.5.5-4.el9_8
1.0%
Low-Moderate Risk
Not Applicable
CVE-2026-28390NONE0
openssl-libs
1:3.5.5-2.el9_8
fixed in 1:3.5.5-3.el9_8
1.0%
Low-Moderate Risk
Not Applicable
CVE-2026-15308NONE0
python3
3.9.25-7.el9_8
fixed in 3.9.25-7.el9_8.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-15308NONE0
python3-libs
3.9.25-7.el9_8
fixed in 3.9.25-7.el9_8.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-3833NONE0
gnutls
3.8.10-3.el9
fixed in 3.8.10-4.el9_8
0.6%
Theoretical Threat
Not Applicable
CVE-2026-42011NONE0
gnutls
3.8.10-3.el9
fixed in 3.8.10-4.el9_8
0.5%
Theoretical Threat
Not Applicable
CVE-2026-34182NONE0
openssl-libs
1:3.5.5-2.el9_8
fixed in 1:3.5.5-4.el9_8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-54369NONE0
acl
2.3.1-4.el9
fixed in 2.4.0-1.el9_8
0.1%
Theoretical Threat
Not Applicable
CVE-2026-42012NONE0
gnutls
3.8.10-3.el9
fixed in 3.8.10-4.el9_8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-54369NONE0
libacl
2.3.1-4.el9
fixed in 2.4.0-1.el9_8
0.1%
Theoretical Threat
Not Applicable
CVE-2026-35177NONE0
vim-minimal
2:8.2.2637-26.el9_8.4
fixed in 2:8.2.2637-26.el9_8.5
0.1%
Theoretical Threat
Not Applicable
CVE-2026-42014NONE0
gnutls
3.8.10-3.el9
fixed in 3.8.10-4.el9_8
0.1%
Theoretical Threat
Not Applicable
CVE-2026-4437NONE0
glibc
2.34-266.el9_8
fixed in 2.34-270.el9_8
0.3%
Theoretical Threat
Not Applicable
CVE-2026-6238NONE0
glibc
2.34-266.el9_8
fixed in 2.34-274.el9_8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-4437NONE0
glibc-common
2.34-266.el9_8
fixed in 2.34-270.el9_8
0.3%
Theoretical Threat
Not Applicable
CVE-2026-6238NONE0
glibc-common
2.34-266.el9_8
fixed in 2.34-274.el9_8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-4437NONE0
glibc-minimal-langpack
2.34-266.el9_8
fixed in 2.34-270.el9_8
0.3%
Theoretical Threat
Not Applicable
CVE-2026-6238NONE0
glibc-minimal-langpack
2.34-266.el9_8
fixed in 2.34-274.el9_8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-54370NONE0
acl
2.3.1-4.el9
fixed in 2.4.0-1.el9_8
<0.1%
Theoretical Threat
Not Applicable
CVE-2026-54370NONE0
libacl
2.3.1-4.el9
fixed in 2.4.0-1.el9_8
<0.1%
Theoretical Threat
Not Applicable
CVE-2026-34181NONE0
openssl-libs
1:3.5.5-2.el9_8
fixed in 1:3.5.5-4.el9_8
0.2%
Theoretical Threat
Not Applicable
CVE-2026-42768NONE0
openssl-libs
1:3.5.5-2.el9_8
fixed in 1:3.5.5-4.el9_8
0.6%
Theoretical Threat
Not Applicable
CVE-2026-5435NONE0
glibc
2.34-266.el9_8
fixed in 2.34-274.el9_8
0.2%
Theoretical Threat
Not Applicable
CVE-2026-5435NONE0
glibc-common
2.34-266.el9_8
fixed in 2.34-274.el9_8
0.2%
Theoretical Threat
Not Applicable
CVE-2026-5435NONE0
glibc-minimal-langpack
2.34-266.el9_8
fixed in 2.34-274.el9_8
0.2%
Theoretical Threat
Not Applicable
CVE-2025-13151NONE0
libtasn1
4.16.0-9.el9
fixed in 4.16.0-10.el9_8
1.1%
Low-Moderate Risk
Not Applicable
CVE-2026-42764NONE0
openssl-libs
1:3.5.5-2.el9_8
fixed in 1:3.5.5-4.el9_8
1.2%
Low-Moderate Risk
Not Applicable
CVE-2026-42769NONE0
openssl-libs
1:3.5.5-2.el9_8
fixed in 1:3.5.5-4.el9_8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-42770NONE0
openssl-libs
1:3.5.5-2.el9_8
fixed in 1:3.5.5-4.el9_8
0.5%
Theoretical Threat
Not Applicable
CVE-2026-9076NONE0
openssl-libs
1:3.5.5-2.el9_8
fixed in 1:3.5.5-4.el9_8
0.6%
Theoretical Threat
Not Applicable
CVE-2024-34459NONE0
libxml2
2.9.13-14.el9_7
fixed in 2.9.13-14.el9_8.1
2.3%
Low-Moderate Risk
Not Applicable
CVE-2026-7383NONE0
openssl-libs
1:3.5.5-2.el9_8
fixed in 1:3.5.5-4.el9_8
0.6%
Theoretical Threat
Not Applicable
CVE-2026-4046NONE0
glibc
2.34-266.el9_8
fixed in 2.34-270.el9_8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-4046NONE0
glibc-common
2.34-266.el9_8
fixed in 2.34-270.el9_8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-4046NONE0
glibc-minimal-langpack
2.34-266.el9_8
fixed in 2.34-270.el9_8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-42015NONE0
gnutls
3.8.10-3.el9
fixed in 3.8.10-4.el9_8
0.7%
Theoretical Threat
Not Applicable
CVE-2026-42766NONE0
openssl-libs
1:3.5.5-2.el9_8
fixed in 1:3.5.5-4.el9_8
1.0%
Theoretical Threat
Not Applicable
CVE-2026-42767NONE0
openssl-libs
1:3.5.5-2.el9_8
fixed in 1:3.5.5-4.el9_8
0.6%
Theoretical Threat
Not Applicable
CVE-2026-5450NONE0
glibc
2.34-266.el9_8
fixed in 2.34-272.el9_8
0.5%
Theoretical Threat
Not Applicable
CVE-2026-5928NONE0
glibc
2.34-266.el9_8
fixed in 2.34-274.el9_8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-5450NONE0
glibc-common
2.34-266.el9_8
fixed in 2.34-272.el9_8
0.5%
Theoretical Threat
Not Applicable
CVE-2026-5928NONE0
glibc-common
2.34-266.el9_8
fixed in 2.34-274.el9_8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-5450NONE0
glibc-minimal-langpack
2.34-266.el9_8
fixed in 2.34-272.el9_8
0.5%
Theoretical Threat
Not Applicable
CVE-2026-5928NONE0
glibc-minimal-langpack
2.34-266.el9_8
fixed in 2.34-274.el9_8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-34180NONE0
openssl-libs
1:3.5.5-2.el9_8
fixed in 1:3.5.5-4.el9_8
1.0%
Low-Moderate Risk
Not Applicable
CVE-2025-5278NONE0
coreutils-single
8.32-40.el9
fixed in 8.32-41.el9_8
0.2%
Theoretical Threat
Not Applicable
CVE-2026-4438NONE0
glibc
2.34-266.el9_8
fixed in 2.34-270.el9_8
0.3%
Theoretical Threat
Not Applicable
CVE-2026-4438NONE0
glibc-common
2.34-266.el9_8
fixed in 2.34-270.el9_8
0.3%
Theoretical Threat
Not Applicable
CVE-2026-4438NONE0
glibc-minimal-langpack
2.34-266.el9_8
fixed in 2.34-270.el9_8
0.3%
Theoretical Threat
Not Applicable
CVE-2026-3832NONE0
gnutls
3.8.10-3.el9
fixed in 3.8.10-4.el9_8
0.7%
Theoretical Threat
Not Applicable
CVE-2026-5419NONE0
gnutls
3.8.10-3.el9
fixed in 3.8.10-4.el9_8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-45446NONE0
openssl-libs
1:3.5.5-2.el9_8
fixed in 1:3.5.5-4.el9_8
0.4%
Theoretical Threat
Not Applicable
CVE-2025-6170NONE0
libxml2
2.9.13-14.el9_7
fixed in 2.9.13-14.el9_8.2
0.2%
Theoretical Threat
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.