Vulnerability Reportdebian:11

debian:11
digestsha256:6f519a81440354a85eb592c5f32109ab80605f6b892455983a6f618bf87fabe9

Executive Summary

Last scanned:

Threat Score
74/100CAUTION
Reputation
TRUSTED

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. The main practical risks are inherited components that can cause denial of service in downstream services using OpenSSL CMP (CVE-2026-63076) or local privilege escalation where systemd-homed is active (CVE-2026-16742). CVE-2026-63076 only applies when CMP PBM verification is enabled, and CVE-2026-16742 requires systemd-homed; disabling or not using those features fully removes those specific risks. Post-exploit-only findings exist but are lower severity (0 at 6.0+; max 4.06) and do not change the CAUTION verdict. Rebuild on a patched base or update the inherited packages before shipping production images. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.

Vulnerabilities

Vulnerability Log

300 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2022-41409HIGH7.5
libpcre2-8-0
10.36-2+deb11u1
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-63076HIGH7.5
libssl1.1
1.1.1w-0+deb11u8
No fix yet
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2022-4899HIGH7.5
libzstd1
1.4.8+dfsg-2.1
No fix yet
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2026-16742HIGH7.48
libsystemd0
247.3-7+deb11u8
No fix yet
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-16742HIGH7.48
libudev1
247.3-7+deb11u8
No fix yet
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-86145MEDIUM6.97
libpcre2-8-0
10.36-2+deb11u1
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-53615MEDIUM6.8
libblkid1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-53615MEDIUM6.8
libmount1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-53615MEDIUM6.8
libsmartcols1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-53615MEDIUM6.8
libuuid1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-78408MEDIUM6.71
libblkid1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-78408MEDIUM6.71
libmount1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-78408MEDIUM6.71
libsmartcols1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-78408MEDIUM6.71
libuuid1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-76642MEDIUM6.63
libblkid1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-78410MEDIUM6.63
libblkid1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-76642MEDIUM6.63
libmount1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-78410MEDIUM6.63
libmount1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-89161MEDIUM6.63
libpcre2-8-0
10.36-2+deb11u1
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-76642MEDIUM6.63
libsmartcols1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-78410MEDIUM6.63
libsmartcols1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-76642MEDIUM6.63
libuuid1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-78410MEDIUM6.63
libuuid1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-103111MEDIUM6.46
libpcre2-8-0
10.36-2+deb11u1
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-63072MEDIUM6.38
libssl1.1
1.1.1w-0+deb11u8
No fix yet
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-54874MEDIUM6.38
libssl1.1
1.1.1w-0+deb11u8
No fix yet
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-63074MEDIUM6.38
libssl1.1
1.1.1w-0+deb11u8
No fix yet
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-88647MEDIUM6.29
libgnutls30
3.7.1-5+deb11u10
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-88648MEDIUM6.29
libgnutls30
3.7.1-5+deb11u10
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-89157MEDIUM6.29
libpcre2-8-0
10.36-2+deb11u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-84782MEDIUM6.29
libssl1.1
1.1.1w-0+deb11u8
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2020-13529MEDIUM6.1
libsystemd0
247.3-7+deb11u8
No fix yet
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2020-13529MEDIUM6.1
libudev1
247.3-7+deb11u8
No fix yet
1.4%
Low-Moderate Risk
Directly Exposed
CVE-2026-54369MEDIUM6.03
libacl1
2.2.53-10
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-53613MEDIUM5.95
libblkid1
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-78409MEDIUM5.95
libblkid1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-86805MEDIUM5.95
libc-bin
2.31-13+deb11u14
No fix yet
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-95818MEDIUM5.95
libc-bin
2.31-13+deb11u14
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-86805MEDIUM5.95
libc6
2.31-13+deb11u14
No fix yet
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-95818MEDIUM5.95
libc6
2.31-13+deb11u14
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53613MEDIUM5.95
libmount1
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-78409MEDIUM5.95
libmount1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-53613MEDIUM5.95
libsmartcols1
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-78409MEDIUM5.95
libsmartcols1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-53613MEDIUM5.95
libuuid1
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-78409MEDIUM5.95
libuuid1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2023-4806MEDIUM5.9
libc-bin
2.31-13+deb11u14
No fix yet
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2023-4813MEDIUM5.9
libc-bin
2.31-13+deb11u14
No fix yet
2.2%
Low-Moderate Risk
Directly Exposed
CVE-2023-4806MEDIUM5.9
libc6
2.31-13+deb11u14
No fix yet
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2023-4813MEDIUM5.9
libc6
2.31-13+deb11u14
No fix yet
2.2%
Low-Moderate Risk
Directly Exposed
CVE-2024-2236MEDIUM5.9
libgcrypt20
1.8.7-6
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-26461MEDIUM5.9
libgssapi-krb5-2
1.18.3-6+deb11u8
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-26461MEDIUM5.9
libk5crypto3
1.18.3-6+deb11u8
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-26461MEDIUM5.9
libkrb5-3
1.18.3-6+deb11u8
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-26461MEDIUM5.9
libkrb5support0
1.18.3-6+deb11u8
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2025-13151MEDIUM5.9
libtasn1-6
4.16.0-2+deb11u2
No fix yet
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2026-19499MEDIUM5.78
libc-bin
2.31-13+deb11u14
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-19499MEDIUM5.78
libc6
2.31-13+deb11u14
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2011-3389MEDIUM5.59
libgnutls30
3.7.1-5+deb11u10
No fix yet
73.3%
Actively Exploited
Directly Exposed
CVE-2026-6238MEDIUM5.52
libc-bin
2.31-13+deb11u14
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-6238MEDIUM5.52
libc6
2.31-13+deb11u14
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-107778MEDIUM5.52
libgssapi-krb5-2
1.18.3-6+deb11u8
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-107778MEDIUM5.52
libk5crypto3
1.18.3-6+deb11u8
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-107778MEDIUM5.52
libkrb5-3
1.18.3-6+deb11u8
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-107778MEDIUM5.52
libkrb5support0
1.18.3-6+deb11u8
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-89158MEDIUM5.52
libpcre2-8-0
10.36-2+deb11u1
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-89160MEDIUM5.52
libpcre2-8-0
10.36-2+deb11u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-85231MEDIUM5.52
libtirpc-common
1.3.1-1+deb11u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-85231MEDIUM5.52
libtirpc3
1.3.1-1+deb11u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-54370MEDIUM5.35
libacl1
2.2.53-10
No fix yet
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-54371MEDIUM5.35
libattr1
1:2.4.48-6
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2019-1010024MEDIUM5.3
libc-bin
2.31-13+deb11u14
No fix yet
3.2%
Low-Moderate Risk
Directly Exposed
CVE-2019-1010025MEDIUM5.3
libc-bin
2.31-13+deb11u14
No fix yet
2.5%
Low-Moderate Risk
Directly Exposed
CVE-2019-1010024MEDIUM5.3
libc6
2.31-13+deb11u14
No fix yet
3.2%
Low-Moderate Risk
Directly Exposed
CVE-2019-1010025MEDIUM5.3
libc6
2.31-13+deb11u14
No fix yet
2.5%
Low-Moderate Risk
Directly Exposed
CVE-2026-13757MEDIUM5.27
libp11-kit0
0.23.22-1
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-18938MEDIUM5.27
libp11-kit0
0.23.22-1
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-14104MEDIUM5.18
libblkid1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-14104MEDIUM5.18
libmount1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-14104MEDIUM5.18
libsmartcols1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-14104MEDIUM5.18
libuuid1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-5435MEDIUM5.02
libc-bin
2.31-13+deb11u14
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-6791MEDIUM5.02
libc-bin
2.31-13+deb11u14
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-77117MEDIUM5.02
libc-bin
2.31-13+deb11u14
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-80489MEDIUM5.02
libc-bin
2.31-13+deb11u14
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-5435MEDIUM5.02
libc6
2.31-13+deb11u14
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-6791MEDIUM5.02
libc6
2.31-13+deb11u14
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-77117MEDIUM5.02
libc6
2.31-13+deb11u14
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-80489MEDIUM5.02
libc6
2.31-13+deb11u14
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-67693MEDIUM5.02
libgnutls30
3.7.1-5+deb11u10
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2024-26458MEDIUM5.02
libgssapi-krb5-2
1.18.3-6+deb11u8
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2024-26458MEDIUM5.02
libk5crypto3
1.18.3-6+deb11u8
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2024-26458MEDIUM5.02
libkrb5-3
1.18.3-6+deb11u8
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2024-26458MEDIUM5.02
libkrb5support0
1.18.3-6+deb11u8
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-89156MEDIUM5.02
libpcre2-8-0
10.36-2+deb11u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-54872MEDIUM5.02
libssl1.1
1.1.1w-0+deb11u8
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-72897MEDIUM5.02
libssl1.1
1.1.1w-0+deb11u8
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-75805MEDIUM5.02
libssl1.1
1.1.1w-0+deb11u8
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-77696MEDIUM5.02
libssl1.1
1.1.1w-0+deb11u8
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2023-4039MEDIUM4.8
libgcc-s1
10.2.1-6
No fix yet
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2023-4039MEDIUM4.8
libstdc++6
10.2.1-6
No fix yet
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2022-0563MEDIUM4.67
libblkid1
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-6368MEDIUM4.67
libc-bin
2.31-13+deb11u14
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-6368MEDIUM4.67
libc6
2.31-13+deb11u14
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2022-0563MEDIUM4.67
libmount1
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2017-16231MEDIUM4.67
libpcre3
2:8.39-13
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2022-0563MEDIUM4.67
libsmartcols1
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-15059MEDIUM4.67
libsystemd0
247.3-7+deb11u8
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-15059MEDIUM4.67
libudev1
247.3-7+deb11u8
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2022-0563MEDIUM4.67
libuuid1
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-27171MEDIUM4.67
zlib1g
1:1.2.11.dfsg-2+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libblkid1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-3184MEDIUM4.5
libblkid1
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-8674MEDIUM4.5
libc-bin
2.31-13+deb11u14
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-8674MEDIUM4.5
libc6
2.31-13+deb11u14
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-95184MEDIUM4.5
libgnutls30
3.7.1-5+deb11u10
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libmount1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-3184MEDIUM4.5
libmount1
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libsmartcols1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-3184MEDIUM4.5
libsmartcols1
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42772MEDIUM4.5
libssl1.1
1.1.1w-0+deb11u8
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-54873MEDIUM4.5
libssl1.1
1.1.1w-0+deb11u8
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-75804MEDIUM4.5
libssl1.1
1.1.1w-0+deb11u8
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-75806MEDIUM4.5
libssl1.1
1.1.1w-0+deb11u8
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-84784MEDIUM4.5
libssl1.1
1.1.1w-0+deb11u8
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2023-31437MEDIUM4.5
libsystemd0
247.3-7+deb11u8
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-31438MEDIUM4.5
libsystemd0
247.3-7+deb11u8
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-31439MEDIUM4.5
libsystemd0
247.3-7+deb11u8
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-85977MEDIUM4.5
libtirpc-common
1.3.1-1+deb11u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-85977MEDIUM4.5
libtirpc3
1.3.1-1+deb11u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-31437MEDIUM4.5
libudev1
247.3-7+deb11u8
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-31438MEDIUM4.5
libudev1
247.3-7+deb11u8
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-31439MEDIUM4.5
libudev1
247.3-7+deb11u8
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libuuid1
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-3184MEDIUM4.5
libuuid1
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42250MEDIUM4.25
libbz2-1.0
1.0.8-4
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-5450MEDIUM4.25
libc-bin
2.31-13+deb11u14
No fix yet
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-5928MEDIUM4.25
libc-bin
2.31-13+deb11u14
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-5450MEDIUM4.25
libc6
2.31-13+deb11u14
No fix yet
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-5928MEDIUM4.25
libc6
2.31-13+deb11u14
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libgssapi-krb5-2
1.18.3-6+deb11u8
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libk5crypto3
1.18.3-6+deb11u8
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libkrb5-3
1.18.3-6+deb11u8
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libkrb5support0
1.18.3-6+deb11u8
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-18374MEDIUM4.17
libc-bin
2.31-13+deb11u14
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-18374MEDIUM4.17
libc6
2.31-13+deb11u14
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-107708MEDIUM4.17
libgssapi-krb5-2
1.18.3-6+deb11u8
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-107708MEDIUM4.17
libk5crypto3
1.18.3-6+deb11u8
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-107708MEDIUM4.17
libkrb5-3
1.18.3-6+deb11u8
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-107708MEDIUM4.17
libkrb5support0
1.18.3-6+deb11u8
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2019-8457MEDIUM4.06
libdb5.3
5.3.28+dfsg1-0.8
No fix yet
45.4%
High Exploitation Risk
Post-Exploit
CVE-2026-78408MEDIUM4.03
mount
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-78408MEDIUM4.03
util-linux
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-27456MEDIUM4
libblkid1
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libmount1
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libsmartcols1
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-54875MEDIUM4
libssl1.1
1.1.1w-0+deb11u8
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libuuid1
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2010-4756MEDIUM4
libc-bin
2.31-13+deb11u14
No fix yet
2.6%
Low-Moderate Risk
Directly Exposed
CVE-2010-4756MEDIUM4
libc6
2.31-13+deb11u14
No fix yet
2.6%
Low-Moderate Risk
Directly Exposed
CVE-2022-3715LOW3.98
bash
5.1-2+deb11u1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-76642LOW3.98
bsdutils
1:2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-78410LOW3.98
bsdutils
1:2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-76642LOW3.98
mount
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-78410LOW3.98
mount
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-48962LOW3.98
perl-base
5.32.1-4+deb11u5
No fix yet
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-76642LOW3.98
util-linux
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-78410LOW3.98
util-linux
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-41992LOW3.82
gzip
1.10-4+deb11u1
No fix yet
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-42497LOW3.82
perl-base
5.32.1-4+deb11u5
No fix yet
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-57433LOW3.82
perl-base
5.32.1-4+deb11u5
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-9538LOW3.82
perl-base
5.32.1-4+deb11u5
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2011-3374LOW3.7
libapt-pkg6.0
2.2.4
No fix yet
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2005-2541LOW3.6
tar
1.34+dfsg-1+deb11u1
No fix yet
4.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-53613LOW3.57
bsdutils
1:2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-78409LOW3.57
bsdutils
1:2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53613LOW3.57
mount
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-78409LOW3.57
mount
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53613LOW3.57
util-linux
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-78409LOW3.57
util-linux
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-19542LOW3.57
libc-bin
2.31-13+deb11u14
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-89092LOW3.57
libc-bin
2.31-13+deb11u14
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-19542LOW3.57
libc6
2.31-13+deb11u14
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-89092LOW3.57
libc6
2.31-13+deb11u14
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2019-1010022LOW3.53
libc-bin
2.31-13+deb11u14
No fix yet
3.2%
Low-Moderate Risk
Post-Exploit
CVE-2019-1010022LOW3.53
libc6
2.31-13+deb11u14
No fix yet
3.2%
Low-Moderate Risk
Post-Exploit
CVE-2023-45853LOW3.53
zlib1g
1:1.2.11.dfsg-2+deb11u2
No fix yet
3.4%
Low-Moderate Risk
Post-Exploit
CVE-2016-2781LOW3.31
coreutils
8.32-4+b1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-15649LOW3.31
perl-base
5.32.1-4+deb11u5
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-19487LOW3.31
perl-base
5.32.1-4+deb11u5
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2019-1010023LOW3.17
libc-bin
2.31-13+deb11u14
No fix yet
3.1%
Low-Moderate Risk
Post-Exploit
CVE-2019-1010023LOW3.17
libc6
2.31-13+deb11u14
No fix yet
3.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-97399LOW3.15
libc-bin
2.31-13+deb11u14
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-97399LOW3.15
libc6
2.31-13+deb11u14
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-35189LOW3.15
libssl1.1
1.1.1w-0+deb11u8
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-35191LOW3.15
libssl1.1
1.1.1w-0+deb11u8
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-75803LOW3.15
libssl1.1
1.1.1w-0+deb11u8
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-14104LOW3.11
bsdutils
1:2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-56391LOW3.11
coreutils
8.32-4+b1
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-56392LOW3.11
coreutils
8.32-4+b1
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-14104LOW3.11
mount
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-14104LOW3.11
util-linux
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-8376LOW3
perl-base
5.32.1-4+deb11u5
No fix yet
0.5%
Theoretical Threat
Post-Exploit
CVE-2023-31486LOW2.92
perl-base
5.32.1-4+deb11u5
No fix yet
1.7%
Low-Moderate Risk
Post-Exploit
CVE-2026-15534LOW2.91
perl-base
5.32.1-4+deb11u5
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2017-7245LOW2.81
libpcre3
2:8.39-13
No fix yet
2.4%
Low-Moderate Risk
Post-Exploit
CVE-2017-7246LOW2.81
libpcre3
2:8.39-13
No fix yet
2.6%
Low-Moderate Risk
Post-Exploit
CVE-2022-0563LOW2.8
bsdutils
1:2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-102473LOW2.8
dash
0.5.11+git20200708+dd9ef66-5
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2022-0563LOW2.8
mount
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-5704LOW2.8
tar
1.34+dfsg-1+deb11u1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2022-0563LOW2.8
util-linux
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-89162LOW2.8
libpcre2-8-0
10.36-2+deb11u1
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2013-4392LOW2.8
libsystemd0
247.3-7+deb11u8
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-40228LOW2.8
libsystemd0
247.3-7+deb11u8
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2013-4392LOW2.8
libudev1
247.3-7+deb11u8
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-40228LOW2.8
libudev1
247.3-7+deb11u8
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-13221LOW2.78
perl-base
5.32.1-4+deb11u5
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-42496LOW2.78
perl-base
5.32.1-4+deb11u5
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2018-20796LOW2.7
libc-bin
2.31-13+deb11u14
No fix yet
5.8%
Low-Moderate Risk
Post-Exploit
CVE-2019-9192LOW2.7
libc-bin
2.31-13+deb11u14
No fix yet
2.4%
Low-Moderate Risk
Post-Exploit
CVE-2018-20796LOW2.7
libc6
2.31-13+deb11u14
No fix yet
5.8%
Low-Moderate Risk
Post-Exploit
CVE-2019-9192LOW2.7
libc6
2.31-13+deb11u14
No fix yet
2.4%
Low-Moderate Risk
Post-Exploit
CVE-2021-33560LOW2.7
libgcrypt20
1.8.7-6
No fix yet
2.4%
Low-Moderate Risk
Post-Exploit
CVE-2018-6829LOW2.7
libgcrypt20
1.8.7-6
No fix yet
1.8%
Low-Moderate Risk
Post-Exploit
CVE-2018-5709LOW2.7
libgssapi-krb5-2
1.18.3-6+deb11u8
No fix yet
2.0%
Low-Moderate Risk
Post-Exploit
CVE-2018-5709LOW2.7
libk5crypto3
1.18.3-6+deb11u8
No fix yet
2.0%
Low-Moderate Risk
Post-Exploit
CVE-2018-5709LOW2.7
libkrb5-3
1.18.3-6+deb11u8
No fix yet
2.0%
Low-Moderate Risk
Post-Exploit
CVE-2018-5709LOW2.7
libkrb5support0
1.18.3-6+deb11u8
No fix yet
2.0%
Low-Moderate Risk
Post-Exploit
CVE-2017-11164LOW2.7
libpcre3
2:8.39-13
No fix yet
3.1%
Low-Moderate Risk
Post-Exploit
CVE-2019-20838LOW2.7
libpcre3
2:8.39-13
No fix yet
2.8%
Low-Moderate Risk
Post-Exploit
CVE-2026-13595LOW2.7
bsdutils
1:2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-3184LOW2.7
bsdutils
1:2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-53910LOW2.7
diffutils
1:3.7-5
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-13595LOW2.7
mount
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-3184LOW2.7
mount
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-12087LOW2.7
perl-base
5.32.1-4+deb11u5
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13595LOW2.7
util-linux
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-3184LOW2.7
util-linux
2.36.1-8+deb11u2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-57432LOW2.57
perl-base
5.32.1-4+deb11u5
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-48959LOW2.55
perl-base
5.32.1-4+deb11u5
No fix yet
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-48961LOW2.55
perl-base
5.32.1-4+deb11u5
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2007-5686LOW2.5
passwd
1:4.8.1-1+deb11u1
No fix yet
0.9%
Theoretical Threat
Post-Exploit
CVE-2026-53615LOW2.45
bsdutils
1:2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53615LOW2.45
mount
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53615LOW2.45
util-linux
2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-78408LOW2.42
bsdutils
1:2.36.1-8+deb11u2
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
bsdutils
1:2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2017-18018LOW2.4
coreutils
8.32-4+b1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-41991LOW2.4
gzip
1.10-4+deb11u1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
mount
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2013-4235LOW2.4
passwd
1:4.8.1-1+deb11u1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
util-linux
2.36.1-8+deb11u2
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-5278LOW2.24
coreutils
8.32-4+b1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-18477LOW2.24
tar
1.34+dfsg-1+deb11u1
No fix yet
<0.1%
Theoretical Threat
Post-Exploit
CVE-2026-18508LOW2.24
tar
1.34+dfsg-1+deb11u1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2011-3374LOW2.22
apt
2.2.4
No fix yet
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-102474LOW2.04
dash
0.5.11+git20200708+dd9ef66-5
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2024-56433LOW1.84
passwd
1:4.8.1-1+deb11u1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2011-4116LOW1.68
perl-base
5.32.1-4+deb11u5
No fix yet
0.5%
Theoretical Threat
Post-Exploit
CVE-2025-69720NONE0
libtinfo6
6.2+20201114-2+deb11u2
No fix yet
0.5%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
ncurses-base
6.2+20201114-2+deb11u2
No fix yet
0.5%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
ncurses-bin
6.2+20201114-2+deb11u2
No fix yet
0.5%
Theoretical Threat
Not Applicable
CVE-2023-50495NONE0
libtinfo6
6.2+20201114-2+deb11u2
No fix yet
1.0%
Low-Moderate Risk
Not Applicable
CVE-2023-50495NONE0
ncurses-base
6.2+20201114-2+deb11u2
No fix yet
1.0%
Low-Moderate Risk
Not Applicable
CVE-2023-50495NONE0
ncurses-bin
6.2+20201114-2+deb11u2
No fix yet
1.0%
Low-Moderate Risk
Not Applicable
CVE-2026-5958NONE0
sed
4.7-1
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2007-5686NONE0
login
1:4.8.1-1+deb11u1
No fix yet
0.9%
Theoretical Threat
Not Applicable
CVE-2023-4039NONE0
gcc-10-base
10.2.1-6
No fix yet
1.0%
Low-Moderate Risk
Not Applicable
CVE-2023-4039NONE0
gcc-9-base
9.3.0-22
No fix yet
1.0%
Low-Moderate Risk
Not Applicable
CVE-2026-54411NONE0
libpam-modules
1.4.0-9+deb11u2
No fix yet
0.5%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-modules-bin
1.4.0-9+deb11u2
No fix yet
0.5%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-runtime
1.4.0-9+deb11u2
No fix yet
0.5%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam0g
1.4.0-9+deb11u2
No fix yet
0.5%
Theoretical Threat
Not Applicable
CVE-2025-30258NONE0
gpgv
2.2.27-2+deb11u3
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-68972NONE0
gpgv
2.2.27-2+deb11u3
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2024-10041NONE0
libpam-modules
1.4.0-9+deb11u2
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2024-10041NONE0
libpam-modules-bin
1.4.0-9+deb11u2
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2024-10041NONE0
libpam-runtime
1.4.0-9+deb11u2
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2024-10041NONE0
libpam0g
1.4.0-9+deb11u2
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2013-4235NONE0
login
1:4.8.1-1+deb11u1
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2026-105712NONE0
gpgv
2.2.27-2+deb11u3
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2024-56433NONE0
login
1:4.8.1-1+deb11u1
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2022-3219NONE0
gpgv
2.2.27-2+deb11u3
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2025-6141NONE0
libtinfo6
6.2+20201114-2+deb11u2
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-6141NONE0
ncurses-base
6.2+20201114-2+deb11u2
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-6141NONE0
ncurses-bin
6.2+20201114-2+deb11u2
No fix yet
0.2%
Theoretical Threat
Not Applicable
TEMP-0841856-B18BAFNONE0
bash
5.1-2+deb11u1
No fix yet
—
Not Applicable
CVE-2026-95209NONE0
libgnutls30
3.7.1-5+deb11u10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-95210NONE0
libgnutls30
3.7.1-5+deb11u10
No fix yet
0.2%
Theoretical Threat
Not Applicable
TEMP-1147318-639065NONE0
liblzma5
5.2.5-2.1~deb11u2
No fix yet
—
Not Applicable
CVE-2025-27587NONE0
libssl1.1
1.1.1w-0+deb11u8
No fix yet
0.4%
Theoretical Threat
Not Applicable
TEMP-0628843-DBAD28NONE0
login
1:4.8.1-1+deb11u1
No fix yet
—
Not Applicable
TEMP-0628843-DBAD28NONE0
passwd
1:4.8.1-1+deb11u1
No fix yet
—
Not Applicable
CVE-2026-7010NONE0
perl-base
5.32.1-4+deb11u5
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2026-7017NONE0
perl-base
5.32.1-4+deb11u5
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-82560NONE0
perl-base
5.32.1-4+deb11u5
No fix yet
0.6%
Theoretical Threat
Not Applicable
TEMP-0517018-A83CE6NONE0
sysvinit-utils
2.96-7+deb11u1
No fix yet
—
Not Applicable
TEMP-0290435-0B57B5NONE0
tar
1.34+dfsg-1+deb11u1
No fix yet
—
Not Applicable
CVE-2026-85091NONE0
zlib1g
1:1.2.11.dfsg-2+deb11u2
No fix yet
0.4%
Theoretical Threat
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Supply chain analysis

Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.