Last scanned:
This image carries significant risk; production deployment is highly discouraged without strict compensating controls. An attacker who can reach the exposed XML or PCRE2 parsing paths could trigger memory corruption or denial of service, potentially leading to arbitrary code execution or service disruption. The stats show 101 exposed findings with 23 at severity 6.0 or above, and the top issues include CVE-2026-86138 and CVE-2026-89161. PCRE2 JIT-related findings only apply if that code path is exposed, and not parsing untrusted XML would fully eliminate the libxml2 exposure.
| CVE ID | Adjusted Severity | Package | Exploit Probability | Risk Context |
|---|---|---|---|---|
| CVE-2026-89161 | MEDIUM6.63 | libpcre2-8-0 10.39-3ubuntu0.1 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-86138 | MEDIUM6.63 | libxml2 2.9.13+dfsg-1ubuntu0.12 fixed in 2.9.13+dfsg-1ubuntu0.14 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-86140 | MEDIUM6.63 | libxml2 2.9.13+dfsg-1ubuntu0.12 fixed in 2.9.13+dfsg-1ubuntu0.13 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-86142 | MEDIUM6.63 | libxml2 2.9.13+dfsg-1ubuntu0.12 fixed in 2.9.13+dfsg-1ubuntu0.14 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-86144 | MEDIUM6.63 | libxml2 2.9.13+dfsg-1ubuntu0.12 fixed in 2.9.13+dfsg-1ubuntu0.14 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2023-34969 | MEDIUM6.5 | libdbus-1-3 1.12.20-2ubuntu4.1 No fix yet | 1.5% Low-Moderate Risk | Directly Exposed |
| CVE-2026-103111 | MEDIUM6.46 | libpcre2-8-0 10.39-3ubuntu0.1 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-66046 | MEDIUM6.38 | libexpat1 2.4.7-1ubuntu0.7 fixed in 2.4.7-1ubuntu0.9 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-76641 | MEDIUM6.38 | libexpat1 2.4.7-1ubuntu0.7 fixed in 2.4.7-1ubuntu0.9 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-58011 | MEDIUM6.38 | libglib2.0-0 2.72.4-0ubuntu2.9 fixed in 2.72.4-0ubuntu2.10 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-58015 | MEDIUM6.38 | libglib2.0-0 2.72.4-0ubuntu2.9 fixed in 2.72.4-0ubuntu2.10 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-58011 | MEDIUM6.38 | libglib2.0-data 2.72.4-0ubuntu2.9 fixed in 2.72.4-0ubuntu2.10 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-58015 | MEDIUM6.38 | libglib2.0-data 2.72.4-0ubuntu2.9 fixed in 2.72.4-0ubuntu2.10 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-15308 | MEDIUM6.38 | libpython3.10-minimal 3.10.12-1~22.04.16 fixed in 3.10.12-1~22.04.18 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-15308 | MEDIUM6.38 | libpython3.10-stdlib 3.10.12-1~22.04.16 fixed in 3.10.12-1~22.04.18 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-63072 | MEDIUM6.38 | libssl3 3.0.2-0ubuntu1.26 fixed in 3.0.2-0ubuntu1.29 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2026-54874 | MEDIUM6.38 | libssl3 3.0.2-0ubuntu1.26 fixed in 3.0.2-0ubuntu1.29 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-63074 | MEDIUM6.38 | libssl3 3.0.2-0ubuntu1.26 fixed in 3.0.2-0ubuntu1.29 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-89157 | MEDIUM6.29 | libpcre2-8-0 10.39-3ubuntu0.1 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-84782 | MEDIUM6.29 | libssl3 3.0.2-0ubuntu1.26 fixed in 3.0.2-0ubuntu1.30 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-86143 | MEDIUM6.21 | libxml2 2.9.13+dfsg-1ubuntu0.12 fixed in 2.9.13+dfsg-1ubuntu0.14 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-16118 | MEDIUM6.03 | libglib2.0-0 2.72.4-0ubuntu2.9 fixed in 2.72.4-0ubuntu2.10 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-16118 | MEDIUM6.03 | libglib2.0-data 2.72.4-0ubuntu2.9 fixed in 2.72.4-0ubuntu2.10 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-53613 | MEDIUM5.95 | libblkid1 2.37.2-4ubuntu3.5 fixed in 2.37.2-4ubuntu3.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2025-5222 | MEDIUM5.95 | libicu70 70.1-2 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-53613 | MEDIUM5.95 | libmount1 2.37.2-4ubuntu3.5 fixed in 2.37.2-4ubuntu3.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53613 | MEDIUM5.95 | libsmartcols1 2.37.2-4ubuntu3.5 fixed in 2.37.2-4ubuntu3.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53613 | MEDIUM5.95 | libuuid1 2.37.2-4ubuntu3.5 fixed in 2.37.2-4ubuntu3.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2024-2236 | MEDIUM5.9 | libgcrypt20 1.9.4-3ubuntu3.2 fixed in 1.9.4-3ubuntu3.3 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-56132 | MEDIUM5.87 | libexpat1 2.4.7-1ubuntu0.7 fixed in 2.4.7-1ubuntu0.9 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-56403 | MEDIUM5.87 | libexpat1 2.4.7-1ubuntu0.7 fixed in 2.4.7-1ubuntu0.8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-56404 | MEDIUM5.87 | libexpat1 2.4.7-1ubuntu0.7 fixed in 2.4.7-1ubuntu0.8 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-56405 | MEDIUM5.87 | libexpat1 2.4.7-1ubuntu0.7 fixed in 2.4.7-1ubuntu0.8 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-56406 | MEDIUM5.87 | libexpat1 2.4.7-1ubuntu0.7 fixed in 2.4.7-1ubuntu0.9 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-56407 | MEDIUM5.87 | libexpat1 2.4.7-1ubuntu0.7 fixed in 2.4.7-1ubuntu0.9 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-56410 | MEDIUM5.87 | libexpat1 2.4.7-1ubuntu0.7 fixed in 2.4.7-1ubuntu0.9 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-56411 | MEDIUM5.87 | libexpat1 2.4.7-1ubuntu0.7 fixed in 2.4.7-1ubuntu0.9 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-89158 | MEDIUM5.52 | libpcre2-8-0 10.39-3ubuntu0.1 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-89160 | MEDIUM5.52 | libpcre2-8-0 10.39-3ubuntu0.1 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-54371 | MEDIUM5.35 | libattr1 1:2.5.1-1build1 fixed in 1:2.5.1-1ubuntu0.1 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-72522 | MEDIUM5.27 | libexpat1 2.4.7-1ubuntu0.7 fixed in 2.4.7-1ubuntu0.9 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-13757 | MEDIUM5.27 | libp11-kit0 0.24.0-6build1 fixed in 0.24.0-6ubuntu0.1 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-18938 | MEDIUM5.27 | libp11-kit0 0.24.0-6build1 fixed in 0.24.0-6ubuntu0.1 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-6791 | MEDIUM5.02 | libc-bin 2.35-0ubuntu3.14 fixed in 2.35-0ubuntu3.15 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-77117 | MEDIUM5.02 | libc-bin 2.35-0ubuntu3.14 fixed in 2.35-0ubuntu3.15 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-80489 | MEDIUM5.02 | libc-bin 2.35-0ubuntu3.14 fixed in 2.35-0ubuntu3.15 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-6791 | MEDIUM5.02 | libc6 2.35-0ubuntu3.14 fixed in 2.35-0ubuntu3.15 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-77117 | MEDIUM5.02 | libc6 2.35-0ubuntu3.14 fixed in 2.35-0ubuntu3.15 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-80489 | MEDIUM5.02 | libc6 2.35-0ubuntu3.14 fixed in 2.35-0ubuntu3.15 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-50219 | MEDIUM5.02 | libexpat1 2.4.7-1ubuntu0.7 fixed in 2.4.7-1ubuntu0.8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-56412 | MEDIUM5.02 | libexpat1 2.4.7-1ubuntu0.7 fixed in 2.4.7-1ubuntu0.8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-89156 | MEDIUM5.02 | libpcre2-8-0 10.39-3ubuntu0.1 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-54872 | MEDIUM5.02 | libssl3 3.0.2-0ubuntu1.26 fixed in 3.0.2-0ubuntu1.30 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-75805 | MEDIUM5.02 | libssl3 3.0.2-0ubuntu1.26 fixed in 3.0.2-0ubuntu1.30 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-77696 | MEDIUM5.02 | libssl3 3.0.2-0ubuntu1.26 fixed in 3.0.2-0ubuntu1.30 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-6368 | MEDIUM4.67 | libc-bin 2.35-0ubuntu3.14 fixed in 2.35-0ubuntu3.15 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-6368 | MEDIUM4.67 | libc6 2.35-0ubuntu3.14 fixed in 2.35-0ubuntu3.15 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-19617 | MEDIUM4.67 | libdevmapper1.02.1 2:1.02.175-2.1ubuntu5 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-66382 | MEDIUM4.67 | libexpat1 2.4.7-1ubuntu0.7 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-32776 | MEDIUM4.67 | libexpat1 2.4.7-1ubuntu0.7 fixed in 2.4.7-1ubuntu0.8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-32777 | MEDIUM4.67 | libexpat1 2.4.7-1ubuntu0.7 fixed in 2.4.7-1ubuntu0.8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-32778 | MEDIUM4.67 | libexpat1 2.4.7-1ubuntu0.7 fixed in 2.4.7-1ubuntu0.8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2022-27943 | MEDIUM4.67 | libgcc-s1 12.3.0-1ubuntu1~22.04.3 No fix yet | 1.0% Theoretical Threat | Directly Exposed |
| CVE-2022-27943 | MEDIUM4.67 | libstdc++6 12.3.0-1ubuntu1~22.04.3 No fix yet | 1.0% Theoretical Threat | Directly Exposed |
| CVE-2026-76781 | MEDIUM4.67 | libxml2 2.9.13+dfsg-1ubuntu0.12 fixed in 2.9.13+dfsg-1ubuntu0.14 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-13595 | MEDIUM4.5 | libblkid1 2.37.2-4ubuntu3.5 fixed in 2.37.2-4ubuntu3.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-15588 | MEDIUM4.5 | libglib2.0-0 2.72.4-0ubuntu2.9 fixed in 2.72.4-0ubuntu2.10 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-86469 | MEDIUM4.5 | libglib2.0-0 2.72.4-0ubuntu2.9 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-15588 | MEDIUM4.5 | libglib2.0-data 2.72.4-0ubuntu2.9 fixed in 2.72.4-0ubuntu2.10 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-86469 | MEDIUM4.5 | libglib2.0-data 2.72.4-0ubuntu2.9 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-13595 | MEDIUM4.5 | libmount1 2.37.2-4ubuntu3.5 fixed in 2.37.2-4ubuntu3.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-4360 | MEDIUM4.5 | libpython3.10-minimal 3.10.12-1~22.04.16 fixed in 3.10.12-1~22.04.18 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-4360 | MEDIUM4.5 | libpython3.10-stdlib 3.10.12-1~22.04.16 fixed in 3.10.12-1~22.04.18 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-13595 | MEDIUM4.5 | libsmartcols1 2.37.2-4ubuntu3.5 fixed in 2.37.2-4ubuntu3.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-75806 | MEDIUM4.5 | libssl3 3.0.2-0ubuntu1.26 fixed in 3.0.2-0ubuntu1.30 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-13595 | MEDIUM4.5 | libuuid1 2.37.2-4ubuntu3.5 fixed in 2.37.2-4ubuntu3.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-42250 | MEDIUM4.25 | libbz2-1.0 1.0.8-5build1 fixed in 1.0.8-5ubuntu0.1 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-39113 | MEDIUM4.25 | libsqlite3-0 3.37.2-2ubuntu0.7 fixed in 3.37.2-2ubuntu0.8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-18374 | MEDIUM4.17 | libc-bin 2.35-0ubuntu3.14 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-18374 | MEDIUM4.17 | libc6 2.35-0ubuntu3.14 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-27456 | MEDIUM4 | libblkid1 2.37.2-4ubuntu3.5 fixed in 2.37.2-4ubuntu3.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-27456 | MEDIUM4 | libmount1 2.37.2-4ubuntu3.5 fixed in 2.37.2-4ubuntu3.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-27456 | MEDIUM4 | libsmartcols1 2.37.2-4ubuntu3.5 fixed in 2.37.2-4ubuntu3.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-27456 | MEDIUM4 | libuuid1 2.37.2-4ubuntu3.5 fixed in 2.37.2-4ubuntu3.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-63072 | LOW3.82 | openssl 3.0.2-0ubuntu1.26 fixed in 3.0.2-0ubuntu1.29 | 0.9% Theoretical Threat | Post-Exploit |
| CVE-2026-63074 | LOW3.82 | openssl 3.0.2-0ubuntu1.26 fixed in 3.0.2-0ubuntu1.29 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-56131 | LOW3.82 | libexpat1 2.4.7-1ubuntu0.7 fixed in 2.4.7-1ubuntu0.9 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-84782 | LOW3.77 | openssl 3.0.2-0ubuntu1.26 fixed in 3.0.2-0ubuntu1.30 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2021-31879 | LOW3.66 | wget 1.21.2-2ubuntu1.4 No fix yet | 1.1% Low-Moderate Risk | Post-Exploit |
| CVE-2026-53613 | LOW3.57 | bsdutils 1:2.37.2-4ubuntu3.5 fixed in 2.37.2-4ubuntu3.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-53613 | LOW3.57 | mount 2.37.2-4ubuntu3.5 fixed in 2.37.2-4ubuntu3.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-53613 | LOW3.57 | util-linux 2.37.2-4ubuntu3.5 fixed in 2.37.2-4ubuntu3.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-19542 | LOW3.57 | libc-bin 2.35-0ubuntu3.14 fixed in 2.35-0ubuntu3.15 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-89092 | LOW3.57 | libc-bin 2.35-0ubuntu3.14 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-19542 | LOW3.57 | libc6 2.35-0ubuntu3.14 fixed in 2.35-0ubuntu3.15 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-89092 | LOW3.57 | libc6 2.35-0ubuntu3.14 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-19487 | LOW3.31 | perl-base 5.34.0-3ubuntu1.7 fixed in 5.34.0-3ubuntu1.9 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-35189 | LOW3.15 | libssl3 3.0.2-0ubuntu1.26 fixed in 3.0.2-0ubuntu1.30 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-75803 | LOW3.15 | libssl3 3.0.2-0ubuntu1.26 fixed in 3.0.2-0ubuntu1.29 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-54872 | LOW3.01 | openssl 3.0.2-0ubuntu1.26 fixed in 3.0.2-0ubuntu1.30 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-75805 | LOW3.01 | openssl 3.0.2-0ubuntu1.26 fixed in 3.0.2-0ubuntu1.30 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-77696 | LOW3.01 | openssl 3.0.2-0ubuntu1.26 fixed in 3.0.2-0ubuntu1.30 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-15534 | LOW2.91 | perl-base 5.34.0-3ubuntu1.7 fixed in 5.34.0-3ubuntu1.9 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-102473 | LOW2.8 | dash 0.5.11+git20210903+057cd650a4ed-3build1 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-19617 | LOW2.8 | dmsetup 2:1.02.175-2.1ubuntu5 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-40228 | LOW2.8 | libsystemd0 249.11-0ubuntu3.22 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-40228 | LOW2.8 | libudev1 249.11-0ubuntu3.22 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-58016 | LOW2.78 | libglib2.0-0 2.72.4-0ubuntu2.9 fixed in 2.72.4-0ubuntu2.10 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-58016 | LOW2.78 | libglib2.0-data 2.72.4-0ubuntu2.9 fixed in 2.72.4-0ubuntu2.10 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-13221 | LOW2.78 | perl-base 5.34.0-3ubuntu1.7 fixed in 5.34.0-3ubuntu1.8 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2022-41409 | LOW2.7 | libpcre2-8-0 10.39-3ubuntu0.1 No fix yet | 1.1% Low-Moderate Risk | Post-Exploit |
| CVE-2026-63076 | LOW2.7 | libssl3 3.0.2-0ubuntu1.26 fixed in 3.0.2-0ubuntu1.29 | 1.6% Low-Moderate Risk | Post-Exploit |
| CVE-2022-4899 | LOW2.7 | libzstd1 1.4.8+dfsg-3build1 No fix yet | 1.6% Low-Moderate Risk | Post-Exploit |
| CVE-2026-63076 | LOW2.7 | openssl 3.0.2-0ubuntu1.26 fixed in 3.0.2-0ubuntu1.29 | 1.6% Low-Moderate Risk | Post-Exploit |
| CVE-2026-13595 | LOW2.7 | bsdutils 1:2.37.2-4ubuntu3.5 fixed in 2.37.2-4ubuntu3.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53910 | LOW2.7 | diffutils 1:3.8-0ubuntu2 fixed in 1:3.8-0ubuntu2.1 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-13595 | LOW2.7 | mount 2.37.2-4ubuntu3.5 fixed in 2.37.2-4ubuntu3.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-75806 | LOW2.7 | openssl 3.0.2-0ubuntu1.26 fixed in 3.0.2-0ubuntu1.30 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-12087 | LOW2.7 | perl-base 5.34.0-3ubuntu1.7 fixed in 5.34.0-3ubuntu1.8 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-4360 | LOW2.7 | python3.10 3.10.12-1~22.04.16 fixed in 3.10.12-1~22.04.18 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-4360 | LOW2.7 | python3.10-minimal 3.10.12-1~22.04.16 fixed in 3.10.12-1~22.04.18 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-13595 | LOW2.7 | util-linux 2.37.2-4ubuntu3.5 fixed in 2.37.2-4ubuntu3.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-58014 | LOW2.63 | libglib2.0-0 2.72.4-0ubuntu2.9 fixed in 2.72.4-0ubuntu2.10 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-58014 | LOW2.63 | libglib2.0-data 2.72.4-0ubuntu2.9 fixed in 2.72.4-0ubuntu2.10 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-74860 | LOW2.6 | libxml2 2.9.13+dfsg-1ubuntu0.12 fixed in 2.9.13+dfsg-1ubuntu0.13 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-57432 | LOW2.57 | perl-base 5.34.0-3ubuntu1.7 fixed in 5.34.0-3ubuntu1.8 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-42250 | LOW2.55 | bzip2 1.0.8-5build1 fixed in 1.0.8-5ubuntu0.1 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-58010 | LOW2.51 | libglib2.0-0 2.72.4-0ubuntu2.9 fixed in 2.72.4-0ubuntu2.10 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-58012 | LOW2.51 | libglib2.0-0 2.72.4-0ubuntu2.9 fixed in 2.72.4-0ubuntu2.10 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-58013 | LOW2.51 | libglib2.0-0 2.72.4-0ubuntu2.9 fixed in 2.72.4-0ubuntu2.10 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-58010 | LOW2.51 | libglib2.0-data 2.72.4-0ubuntu2.9 fixed in 2.72.4-0ubuntu2.10 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-58012 | LOW2.51 | libglib2.0-data 2.72.4-0ubuntu2.9 fixed in 2.72.4-0ubuntu2.10 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-58013 | LOW2.51 | libglib2.0-data 2.72.4-0ubuntu2.9 fixed in 2.72.4-0ubuntu2.10 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-86145 | LOW2.51 | libpcre2-8-0 10.39-3ubuntu0.1 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-53615 | LOW2.45 | bsdutils 1:2.37.2-4ubuntu3.5 fixed in 2.37.2-4ubuntu3.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53615 | LOW2.45 | libblkid1 2.37.2-4ubuntu3.5 fixed in 2.37.2-4ubuntu3.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53615 | LOW2.45 | libmount1 2.37.2-4ubuntu3.5 fixed in 2.37.2-4ubuntu3.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53615 | LOW2.45 | libsmartcols1 2.37.2-4ubuntu3.5 fixed in 2.37.2-4ubuntu3.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53615 | LOW2.45 | libuuid1 2.37.2-4ubuntu3.5 fixed in 2.37.2-4ubuntu3.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53615 | LOW2.45 | mount 2.37.2-4ubuntu3.5 fixed in 2.37.2-4ubuntu3.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53615 | LOW2.45 | util-linux 2.37.2-4ubuntu3.5 fixed in 2.37.2-4ubuntu3.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-27456 | LOW2.4 | bsdutils 1:2.37.2-4ubuntu3.5 fixed in 2.37.2-4ubuntu3.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-27456 | LOW2.4 | mount 2.37.2-4ubuntu3.5 fixed in 2.37.2-4ubuntu3.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-27456 | LOW2.4 | util-linux 2.37.2-4ubuntu3.5 fixed in 2.37.2-4ubuntu3.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-76957 | LOW2.39 | libexpat1 2.4.7-1ubuntu0.7 fixed in 2.4.7-1ubuntu0.9 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-54874 | LOW2.29 | openssl 3.0.2-0ubuntu1.26 fixed in 3.0.2-0ubuntu1.29 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-57433 | LOW2.29 | perl-base 5.34.0-3ubuntu1.7 fixed in 5.34.0-3ubuntu1.8 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-15308 | LOW2.29 | python3.10 3.10.12-1~22.04.16 fixed in 3.10.12-1~22.04.18 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-15308 | LOW2.29 | python3.10-minimal 3.10.12-1~22.04.16 fixed in 3.10.12-1~22.04.18 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2025-5278 | LOW2.24 | coreutils 8.32-4.1ubuntu1.3 fixed in 8.32-4.1ubuntu1.4 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-18477 | LOW2.24 | tar 1.34+dfsg-1ubuntu0.1.22.04.6 No fix yet | <0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-18508 | LOW2.24 | tar 1.34+dfsg-1ubuntu0.1.22.04.6 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-102474 | LOW2.04 | dash 0.5.11+git20210903+057cd650a4ed-3build1 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-35189 | LOW1.89 | openssl 3.0.2-0ubuntu1.26 fixed in 3.0.2-0ubuntu1.30 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-75803 | LOW1.89 | openssl 3.0.2-0ubuntu1.26 fixed in 3.0.2-0ubuntu1.29 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2024-56433 | LOW1.84 | passwd 1:4.8.1-2ubuntu2.2 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2023-29383 | LOW1.68 | passwd 1:4.8.1-2ubuntu2.2 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2023-34969 | NONE0 | dbus 1.12.20-2ubuntu4.1 No fix yet | 1.5% Low-Moderate Risk | Not Applicable |
| CVE-2023-50495 | NONE0 | libncurses6 6.3-2ubuntu0.2 No fix yet | 1.0% Low-Moderate Risk | Not Applicable |
| CVE-2023-50495 | NONE0 | libncursesw6 6.3-2ubuntu0.2 No fix yet | 1.0% Low-Moderate Risk | Not Applicable |
| CVE-2023-50495 | NONE0 | libtinfo6 6.3-2ubuntu0.2 No fix yet | 1.0% Low-Moderate Risk | Not Applicable |
| CVE-2023-50495 | NONE0 | ncurses-base 6.3-2ubuntu0.2 No fix yet | 1.0% Low-Moderate Risk | Not Applicable |
| CVE-2023-50495 | NONE0 | ncurses-bin 6.3-2ubuntu0.2 No fix yet | 1.0% Low-Moderate Risk | Not Applicable |
| CVE-2022-27943 | NONE0 | gcc-12-base 12.3.0-1ubuntu1~22.04.3 No fix yet | 1.0% Theoretical Threat | Not Applicable |
| CVE-2024-56433 | NONE0 | login 1:4.8.1-2ubuntu2.2 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-6141 | NONE0 | libncurses6 6.3-2ubuntu0.2 fixed in 6.3-2ubuntu0.3 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-6141 | NONE0 | libncursesw6 6.3-2ubuntu0.2 fixed in 6.3-2ubuntu0.3 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-6141 | NONE0 | libtinfo6 6.3-2ubuntu0.2 fixed in 6.3-2ubuntu0.3 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2023-29383 | NONE0 | login 1:4.8.1-2ubuntu2.2 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-6141 | NONE0 | ncurses-base 6.3-2ubuntu0.2 fixed in 6.3-2ubuntu0.3 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-6141 | NONE0 | ncurses-bin 6.3-2ubuntu0.2 fixed in 6.3-2ubuntu0.3 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-40228 | NONE0 | systemd 249.11-0ubuntu3.22 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-40228 | NONE0 | systemd-timesyncd 249.11-0ubuntu3.22 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-56408 | NONE0 | libexpat1 2.4.7-1ubuntu0.7 fixed in 2.4.7-1ubuntu0.8 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-56409 | NONE0 | libexpat1 2.4.7-1ubuntu0.7 fixed in 2.4.7-1ubuntu0.9 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-67693 | NONE0 | libgnutls30 3.7.3-4ubuntu1.9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-88647 | NONE0 | libgnutls30 3.7.3-4ubuntu1.9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-95184 | NONE0 | libgnutls30 3.7.3-4ubuntu1.9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-95209 | NONE0 | libgnutls30 3.7.3-4ubuntu1.9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-95210 | NONE0 | libgnutls30 3.7.3-4ubuntu1.9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-85091 | NONE0 | zlib1g 1:1.2.11.dfsg-2ubuntu9.2 No fix yet | 0.4% Theoretical Threat | Not Applicable |
Which CVEs are actually reachable — is the vulnerable code even linked and callable.
Live-container probes: default user, writable paths, capabilities, exposed ports.
Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.
A step-by-step hardened build plan, with parity tests proving nothing breaks.
Want to check another image? Run a full scan with the Docker Security Scanner.