Last scanned:
This base/runtime image is a clean foundation for building production images. It does carry 74 exposed-surface findings and 48 post-exploit-only findings, so these are not absent, but their maximum severities of 4.14 and 3.54 are low and none are known to be actively exploited. Any image built on top of it would inherit these low-severity issues, so they should be tracked as routine hygiene in the final image. Its official, digest-pinned origin and TRUSTED rating add confidence in its provenance. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.
| CVE ID | Adjusted Severity | Package | Exploit Probability | Risk Context |
|---|---|---|---|---|
| CVE-2026-78367 | MEDIUM4.14 | rpm 4.16.1.3-40.el9 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-84837 | MEDIUM4.14 | rpm 4.16.1.3-40.el9 No fix yet | 1.3% Low-Moderate Risk | Directly Exposed |
| CVE-2026-95519 | MEDIUM4.14 | rpm 4.16.1.3-40.el9 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-95520 | MEDIUM4.14 | rpm 4.16.1.3-40.el9 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-95521 | MEDIUM4.14 | rpm 4.16.1.3-40.el9 No fix yet | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-59871 | MEDIUM4.14 | tar 2:1.34-11.el9 No fix yet | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-90803 | MEDIUM4.08 | binutils 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-90828 | LOW3.96 | binutils 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-90829 | LOW3.96 | binutils 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-90831 | LOW3.96 | binutils 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-33056 | LOW3.9 | tar 2:1.34-11.el9 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2024-10524 | LOW3.9 | wget 1.21.1-8.el9_4 No fix yet | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-16599 | LOW3.9 | wget 1.21.1-8.el9_4 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-90804 | LOW3.66 | binutils 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2021-31879 | LOW3.66 | wget 1.21.1-8.el9_4 No fix yet | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-54872 | LOW3.54 | openssl 1:3.5.5-6.el9_8 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-72897 | LOW3.54 | openssl 1:3.5.5-6.el9_8 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-75805 | LOW3.54 | openssl 1:3.5.5-6.el9_8 No fix yet | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-77696 | LOW3.54 | openssl 1:3.5.5-6.el9_8 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-15146 | LOW3.54 | wget 1.21.1-8.el9_4 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-11082 | LOW3.52 | binutils 2.35.2-72.el9 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-5245 | LOW3.52 | binutils 2.35.2-72.el9 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-7545 | LOW3.52 | binutils 2.35.2-72.el9 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-15003 | LOW3.36 | binutils 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-19548 | LOW3.3 | binutils 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-6844 | LOW3.3 | binutils 2.35.2-72.el9 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-90830 | LOW3.3 | binutils 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-53655 | LOW3.3 | tar 2:1.34-11.el9 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-5704 | LOW3.3 | tar 2:1.34-11.el9 fixed in 2:1.34-13.el9_8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2021-20197 | LOW3.21 | binutils 2.35.2-72.el9 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-42772 | LOW3.18 | openssl 1:3.5.5-6.el9_8 No fix yet | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-54873 | LOW3.18 | openssl 1:3.5.5-6.el9_8 No fix yet | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2026-75804 | LOW3.18 | openssl 1:3.5.5-6.el9_8 No fix yet | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-75806 | LOW3.18 | openssl 1:3.5.5-6.el9_8 No fix yet | 1.1% Low-Moderate Risk | Post-Exploit |
| CVE-2026-84784 | LOW3.18 | openssl 1:3.5.5-6.el9_8 No fix yet | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-59875 | LOW3.18 | tar 2:1.34-11.el9 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-13595 | LOW3.18 | util-linux 2.37.4-25.el9 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-58470 | LOW3.18 | wget 1.21.1-8.el9_4 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-6845 | LOW3 | binutils 2.35.2-72.el9 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-90802 | LOW3 | binutils 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-53615 | LOW2.88 | util-linux 2.37.4-25.el9 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2025-68972 | LOW2.82 | gnupg2 2.3.3-5.el9_7 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-41991 | LOW2.82 | gzip 1.12-1.el9 fixed in 1.12-2.el9_8 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-54875 | LOW2.82 | openssl 1:3.5.5-6.el9_8 No fix yet | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2025-64118 | LOW2.82 | tar 2:1.34-11.el9 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-27456 | LOW2.82 | util-linux 2.37.4-25.el9 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-11081 | LOW2.8 | binutils 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-14456 | LOW2.7 | openssl 1:3.5.5-6.el9_8 fixed in 1:3.5.8-1.el9_8 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2026-84782 | LOW2.66 | openssl 1:3.5.5-6.el9_8 fixed in 1:3.5.8-2.el9_8 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2026-18477 | LOW2.64 | tar 2:1.34-11.el9 fixed in 2:1.34-13.el9_8 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-18508 | LOW2.64 | tar 2:1.34-11.el9 fixed in 2:1.34-13.el9_8 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53613 | LOW2.52 | util-linux 2.37.4-25.el9 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2021-45078 | LOW2.48 | binutils 2.35.2-72.el9 No fix yet | 1.4% Low-Moderate Risk | Post-Exploit |
| CVE-2026-18798 | LOW2.48 | openssl 1:3.5.5-6.el9_8 fixed in 1:3.5.8-1.el9_8 | 1.7% Low-Moderate Risk | Post-Exploit |
| CVE-2026-63072 | LOW2.48 | openssl 1:3.5.5-6.el9_8 fixed in 1:3.5.8-1.el9_8 | 0.9% Theoretical Threat | Post-Exploit |
| CVE-2026-63076 | LOW2.48 | openssl 1:3.5.5-6.el9_8 fixed in 1:3.5.8-1.el9_8 | 1.6% Low-Moderate Risk | Post-Exploit |
| CVE-2026-103242 | LOW2.48 | rpm 4.16.1.3-40.el9 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2005-2541 | LOW2.48 | tar 2:1.34-11.el9 No fix yet | 4.0% Low-Moderate Risk | Post-Exploit |
| CVE-2026-58471 | LOW2.48 | wget 1.21.1-8.el9_4 fixed in 1.21.1-11.el9_8 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-58472 | LOW2.48 | wget 1.21.1-8.el9_4 fixed in 1.21.1-11.el9_8 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2021-3826 | LOW2.34 | binutils 2.35.2-72.el9 No fix yet | 1.5% Low-Moderate Risk | Directly Exposed |
| CVE-2025-1153 | LOW2.34 | binutils 2.35.2-72.el9 No fix yet | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2025-66864 | LOW2.34 | binutils 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-66866 | LOW2.34 | binutils 2.35.2-72.el9 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-69649 | LOW2.34 | binutils 2.35.2-72.el9 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-69650 | LOW2.34 | binutils 2.35.2-72.el9 No fix yet | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2025-69651 | LOW2.34 | binutils 2.35.2-72.el9 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-24883 | LOW2.34 | gnupg2 2.3.3-5.el9_7 No fix yet | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-41992 | LOW2.34 | gzip 1.12-1.el9 fixed in 1.12-2.el9_8 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2023-50495 | LOW2.34 | ncurses-base 6.2-12.20210508.el9 No fix yet | 1.0% Low-Moderate Risk | Post-Exploit |
| CVE-2023-50495 | LOW2.34 | ncurses-libs 6.2-12.20210508.el9 No fix yet | 1.0% Low-Moderate Risk | Post-Exploit |
| CVE-2024-41996 | LOW2.34 | openssl 1:3.5.5-6.el9_8 No fix yet | 1.1% Low-Moderate Risk | Post-Exploit |
| CVE-2026-14457 | LOW2.34 | openssl 1:3.5.5-6.el9_8 fixed in 1:3.5.8-1.el9_8 | 1.2% Low-Moderate Risk | Post-Exploit |
| CVE-2026-28387 | LOW2.34 | openssl 1:3.5.5-6.el9_8 No fix yet | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2026-28388 | LOW2.34 | openssl 1:3.5.5-6.el9_8 No fix yet | 0.9% Theoretical Threat | Post-Exploit |
| CVE-2026-28389 | LOW2.34 | openssl 1:3.5.5-6.el9_8 No fix yet | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2026-31789 | LOW2.34 | openssl 1:3.5.5-6.el9_8 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-42765 | LOW2.34 | openssl 1:3.5.5-6.el9_8 No fix yet | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-54874 | LOW2.34 | openssl 1:3.5.5-6.el9_8 fixed in 1:3.5.8-1.el9_8 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-63073 | LOW2.34 | openssl 1:3.5.5-6.el9_8 fixed in 1:3.5.8-1.el9_8 | 1.2% Low-Moderate Risk | Post-Exploit |
| CVE-2026-63074 | LOW2.34 | openssl 1:3.5.5-6.el9_8 fixed in 1:3.5.8-1.el9_8 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-63075 | LOW2.34 | openssl 1:3.5.5-6.el9_8 fixed in 1:3.5.8-1.el9_8 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-44605 | LOW2.34 | rpm 4.16.1.3-40.el9 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-35189 | LOW2.22 | openssl 1:3.5.5-6.el9_8 No fix yet | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-35191 | LOW2.22 | openssl 1:3.5.5-6.el9_8 No fix yet | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2026-75803 | LOW2.22 | openssl 1:3.5.5-6.el9_8 fixed in 1:3.5.8-1.el9_8 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-105712 | LOW2.16 | gnupg2 2.3.3-5.el9_7 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2022-38533 | LOW1.99 | binutils 2.35.2-72.el9 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2022-44840 | LOW1.99 | binutils 2.35.2-72.el9 No fix yet | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2022-47007 | LOW1.99 | binutils 2.35.2-72.el9 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2022-47008 | LOW1.99 | binutils 2.35.2-72.el9 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2022-47010 | LOW1.99 | binutils 2.35.2-72.el9 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2022-47011 | LOW1.99 | binutils 2.35.2-72.el9 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2023-1972 | LOW1.99 | binutils 2.35.2-72.el9 No fix yet | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2024-57360 | LOW1.99 | binutils 2.35.2-72.el9 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-11412 | LOW1.99 | binutils 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-11413 | LOW1.99 | binutils 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-11414 | LOW1.99 | binutils 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-11494 | LOW1.99 | binutils 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-11495 | LOW1.99 | binutils 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-11839 | LOW1.99 | binutils 2.35.2-72.el9 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-11840 | LOW1.99 | binutils 2.35.2-72.el9 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-3198 | LOW1.99 | binutils 2.35.2-72.el9 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-30258 | LOW1.99 | gnupg2 2.3.3-5.el9_7 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2024-13176 | LOW1.99 | openssl 1:3.5.5-6.el9_8 No fix yet | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2025-66861 | LOW1.98 | binutils 2.35.2-72.el9 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2025-66862 | LOW1.98 | binutils 2.35.2-72.el9 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-66863 | LOW1.98 | binutils 2.35.2-72.el9 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-66865 | LOW1.98 | binutils 2.35.2-72.el9 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-69647 | LOW1.98 | binutils 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-69648 | LOW1.98 | binutils 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-69652 | LOW1.98 | binutils 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-1152 | LOW1.89 | binutils 2.35.2-72.el9 No fix yet | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2025-9232 | LOW1.86 | openssl 1:3.5.5-6.el9_8 No fix yet | 2.0% Low-Moderate Risk | Post-Exploit |
| CVE-2026-57062 | LOW1.74 | gnupg2 2.3.3-5.el9_7 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2022-3219 | LOW1.68 | gnupg2 2.3.3-5.el9_7 No fix yet | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2023-39804 | LOW1.68 | tar 2:1.34-11.el9 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-69644 | LOW1.68 | binutils 2.35.2-72.el9 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2025-69645 | LOW1.68 | binutils 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-69646 | LOW1.68 | binutils 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-1150 | LOW1.58 | binutils 2.35.2-72.el9 No fix yet | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2025-1151 | LOW1.58 | binutils 2.35.2-72.el9 No fix yet | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-63387 | NONE0 | libevent 2.1.12-8.el9_4 fixed in 2.1.13-1.el9_8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-74860 | NONE0 | libxml2 2.9.13-14.el9_8.2 fixed in 2.9.13-14.el9_8.5 | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-63388 | NONE0 | libevent 2.1.12-8.el9_4 fixed in 2.1.13-1.el9_8 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-77214 | NONE0 | expat 2.5.0-6.el9_8.1 fixed in 2.5.0-6.el9_8.7 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-86145 | NONE0 | pcre2 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-86145 | NONE0 | pcre2-syntax 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-8458 | NONE0 | curl-minimal 7.76.1-40.el9_8.5 fixed in 7.76.1-40.el9_8.7 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-111497 | NONE0 | libbrotli 1.0.9-9.el9_7 No fix yet | 36.0% High Exploitation Risk | Not Applicable |
| CVE-2026-8458 | NONE0 | libcurl-minimal 7.76.1-40.el9_8.5 fixed in 7.76.1-40.el9_8.7 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-53615 | NONE0 | libblkid 2.37.4-25.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-53615 | NONE0 | libfdisk 2.37.4-25.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-53615 | NONE0 | libmount 2.37.4-25.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-53615 | NONE0 | libsmartcols 2.37.4-25.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-53615 | NONE0 | libuuid 2.37.4-25.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-53615 | NONE0 | util-linux-core 2.37.4-25.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-86140 | NONE0 | libxml2 2.9.13-14.el9_8.2 fixed in 2.9.13-14.el9_8.5 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-89161 | NONE0 | pcre2 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-89161 | NONE0 | pcre2-syntax 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-11822 | NONE0 | sqlite-libs 3.34.1-10.el9_8 fixed in 3.34.1-11.el9_8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-11824 | NONE0 | sqlite-libs 3.34.1-10.el9_8 fixed in 3.34.1-11.el9_8 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-63382 | NONE0 | libevent 2.1.12-8.el9_4 fixed in 2.1.13-1.el9_8 | 0.8% Theoretical Threat | Not Applicable |
| CVE-2026-63385 | NONE0 | libevent 2.1.12-8.el9_4 fixed in 2.1.13-1.el9_8 | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-103111 | NONE0 | pcre2 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-103111 | NONE0 | pcre2-syntax 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-8927 | NONE0 | curl-minimal 7.76.1-40.el9_8.5 fixed in 7.76.1-40.el9_8.7 | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-66046 | NONE0 | expat 2.5.0-6.el9_8.1 fixed in 2.5.0-6.el9_8.5 | 0.7% Theoretical Threat | Not Applicable |
| CVE-2026-76641 | NONE0 | expat 2.5.0-6.el9_8.1 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-93990 | NONE0 | expat 2.5.0-6.el9_8.1 fixed in 2.5.0-6.el9_8.5 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-8927 | NONE0 | libcurl-minimal 7.76.1-40.el9_8.5 fixed in 7.76.1-40.el9_8.7 | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-63383 | NONE0 | libevent 2.1.12-8.el9_4 fixed in 2.1.13-1.el9_8 | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-63384 | NONE0 | libevent 2.1.12-8.el9_4 fixed in 2.1.13-1.el9_8 | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-14456 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 fixed in 1:3.5.8-1.el9_8 | 0.7% Theoretical Threat | Not Applicable |
| CVE-2026-84782 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 fixed in 1:3.5.8-2.el9_8 | 0.8% Theoretical Threat | Not Applicable |
| CVE-2026-53613 | NONE0 | libblkid 2.37.4-25.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-53613 | NONE0 | libfdisk 2.37.4-25.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-53613 | NONE0 | libmount 2.37.4-25.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-53613 | NONE0 | libsmartcols 2.37.4-25.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-53613 | NONE0 | libuuid 2.37.4-25.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-53613 | NONE0 | util-linux-core 2.37.4-25.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2021-45078 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 1.4% Low-Moderate Risk | Not Applicable |
| CVE-2025-11082 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-5245 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-7545 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-5773 | NONE0 | curl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-8932 | NONE0 | curl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-9080 | NONE0 | curl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-9545 | NONE0 | curl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-9546 | NONE0 | curl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.7% Theoretical Threat | Not Applicable |
| CVE-2026-107161 | NONE0 | cyrus-sasl-lib 2.1.27-22.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-56132 | NONE0 | expat 2.5.0-6.el9_8.1 fixed in 2.5.0-6.el9_8.3 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-56403 | NONE0 | expat 2.5.0-6.el9_8.1 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-56404 | NONE0 | expat 2.5.0-6.el9_8.1 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-56405 | NONE0 | expat 2.5.0-6.el9_8.1 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-56406 | NONE0 | expat 2.5.0-6.el9_8.1 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-56407 | NONE0 | expat 2.5.0-6.el9_8.1 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-76957 | NONE0 | expat 2.5.0-6.el9_8.1 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-40467 | NONE0 | gawk 5.1.0-6.el9 fixed in 5.1.0-6.el9_8.1 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-40468 | NONE0 | gawk 5.1.0-6.el9 fixed in 5.1.0-6.el9_8.1 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-40553 | NONE0 | gawk 5.1.0-6.el9 fixed in 5.1.0-6.el9_8.1 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-16118 | NONE0 | glib2 2.68.4-19.el9_8.9 fixed in 2.68.4-19.el9_8.10 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-86805 | NONE0 | glibc 2.34-275.el9_8 No fix yet | <0.1% Theoretical Threat | Not Applicable |
| CVE-2026-95818 | NONE0 | glibc 2.34-275.el9_8 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-86805 | NONE0 | glibc-common 2.34-275.el9_8 No fix yet | <0.1% Theoretical Threat | Not Applicable |
| CVE-2026-95818 | NONE0 | glibc-common 2.34-275.el9_8 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-86805 | NONE0 | glibc-langpack-en 2.34-275.el9_8 No fix yet | <0.1% Theoretical Threat | Not Applicable |
| CVE-2026-95818 | NONE0 | glibc-langpack-en 2.34-275.el9_8 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-86805 | NONE0 | glibc-minimal-langpack 2.34-275.el9_8 No fix yet | <0.1% Theoretical Threat | Not Applicable |
| CVE-2026-95818 | NONE0 | glibc-minimal-langpack 2.34-275.el9_8 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-88647 | NONE0 | gnutls 3.8.10-8.el9_8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-88648 | NONE0 | gnutls 3.8.10-8.el9_8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-5773 | NONE0 | libcurl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-8932 | NONE0 | libcurl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-9080 | NONE0 | libcurl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-9545 | NONE0 | libcurl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-9546 | NONE0 | libcurl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.7% Theoretical Threat | Not Applicable |
| CVE-2026-102010 | NONE0 | libgcc 11.5.0-14.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-95619 | NONE0 | libgcc 11.5.0-14.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-102010 | NONE0 | libstdc++ 11.5.0-14.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-95619 | NONE0 | libstdc++ 11.5.0-14.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-11979 | NONE0 | libxml2 2.9.13-14.el9_8.2 fixed in 2.9.13-14.el9_8.4 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-6653 | NONE0 | libxml2 2.9.13-14.el9_8.2 fixed in 2.9.13-14.el9_8.4 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-86138 | NONE0 | libxml2 2.9.13-14.el9_8.2 fixed in 2.9.13-14.el9_8.5 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-86142 | NONE0 | libxml2 2.9.13-14.el9_8.2 fixed in 2.9.13-14.el9_8.5 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-86143 | NONE0 | libxml2 2.9.13-14.el9_8.2 fixed in 2.9.13-14.el9_8.5 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-86144 | NONE0 | libxml2 2.9.13-14.el9_8.2 fixed in 2.9.13-14.el9_8.5 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-18798 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 fixed in 1:3.5.8-1.el9_8 | 1.7% Low-Moderate Risk | Not Applicable |
| CVE-2026-63072 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 fixed in 1:3.5.8-1.el9_8 | 0.9% Theoretical Threat | Not Applicable |
| CVE-2026-63076 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 fixed in 1:3.5.8-1.el9_8 | 1.6% Low-Moderate Risk | Not Applicable |
| CVE-2026-89157 | NONE0 | pcre2 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-89157 | NONE0 | pcre2-syntax 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-103242 | NONE0 | rpm-libs 4.16.1.3-40.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-78367 | NONE0 | rpm-libs 4.16.1.3-40.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-84837 | NONE0 | rpm-libs 4.16.1.3-40.el9 No fix yet | 1.3% Low-Moderate Risk | Not Applicable |
| CVE-2026-95519 | NONE0 | rpm-libs 4.16.1.3-40.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-95520 | NONE0 | rpm-libs 4.16.1.3-40.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-95521 | NONE0 | rpm-libs 4.16.1.3-40.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-90803 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-114406 | NONE0 | ca-certificates 2025.2.80_v9.0.305-91.el9 fixed in 2026.2.92_v9.0.319-90.3.el9_8 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-13034 | NONE0 | curl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-13034 | NONE0 | libcurl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-22185 | NONE0 | openldap 2.6.8-4.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-4105 | NONE0 | systemd 252-67.el9_8.4 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-4105 | NONE0 | systemd-libs 252-67.el9_8.4 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-4105 | NONE0 | systemd-pam 252-67.el9_8.4 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-4105 | NONE0 | systemd-rpm-macros 252-67.el9_8.4 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-90828 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-90829 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-90831 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-63381 | NONE0 | libevent 2.1.12-8.el9_4 fixed in 2.1.13-1.el9_8 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-11856 | NONE0 | curl-minimal 7.76.1-40.el9_8.5 fixed in 7.76.1-40.el9_8.8 | 0.7% Theoretical Threat | Not Applicable |
| CVE-2026-19931 | NONE0 | curl-minimal 7.76.1-40.el9_8.5 No fix yet | 1.1% Low-Moderate Risk | Not Applicable |
| CVE-2026-3784 | NONE0 | curl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-5545 | NONE0 | curl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-6429 | NONE0 | curl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-8924 | NONE0 | curl-minimal 7.76.1-40.el9_8.5 fixed in 7.76.1-40.el9_8.8 | 0.7% Theoretical Threat | Not Applicable |
| CVE-2026-92388 | NONE0 | curl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-107778 | NONE0 | krb5-libs 1.21.1-10.el9_8 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-4426 | NONE0 | libarchive 3.5.3-11.el9_8 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-11856 | NONE0 | libcurl-minimal 7.76.1-40.el9_8.5 fixed in 7.76.1-40.el9_8.8 | 0.7% Theoretical Threat | Not Applicable |
| CVE-2026-19931 | NONE0 | libcurl-minimal 7.76.1-40.el9_8.5 No fix yet | 1.1% Low-Moderate Risk | Not Applicable |
| CVE-2026-3784 | NONE0 | libcurl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-5545 | NONE0 | libcurl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-6429 | NONE0 | libcurl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-8924 | NONE0 | libcurl-minimal 7.76.1-40.el9_8.5 fixed in 7.76.1-40.el9_8.8 | 0.7% Theoretical Threat | Not Applicable |
| CVE-2026-92388 | NONE0 | libcurl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-63379 | NONE0 | libevent 2.1.12-8.el9_4 fixed in 2.1.13-1.el9_8 | 0.7% Theoretical Threat | Not Applicable |
| CVE-2026-9149 | NONE0 | libsolv 0.7.24-6.el9_8 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-9150 | NONE0 | libsolv 0.7.24-6.el9_8 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-89158 | NONE0 | pcre2 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-89158 | NONE0 | pcre2-syntax 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-12610 | NONE0 | pam 1.5.1-28.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2021-20197 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-54371 | NONE0 | libattr 2.5.1-3.el9 fixed in 2.6.0-1.el9_8 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-5958 | NONE0 | sed 4.8-10.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-92822 | NONE0 | libmodulemd 2.13.0-2.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-92823 | NONE0 | libmodulemd 2.13.0-2.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-92824 | NONE0 | libmodulemd 2.13.0-2.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-1757 | NONE0 | libxml2 2.9.13-14.el9_8.2 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-90804 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-56391 | NONE0 | coreutils-single 8.32-41.el9_8 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-56392 | NONE0 | coreutils-single 8.32-41.el9_8 fixed in 8.32-41.el9_8.1 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-64506 | NONE0 | libpng 2:1.6.37-15.el9_8.2 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-102633 | NONE0 | expat 2.5.0-6.el9_8.1 fixed in 2.5.0-6.el9_8.7 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-113351 | NONE0 | expat 2.5.0-6.el9_8.1 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-50219 | NONE0 | expat 2.5.0-6.el9_8.1 fixed in 2.5.0-6.el9_8.3 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-56412 | NONE0 | expat 2.5.0-6.el9_8.1 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-6791 | NONE0 | glibc 2.34-275.el9_8 fixed in 2.34-283.el9_8 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-77117 | NONE0 | glibc 2.34-275.el9_8 fixed in 2.34-283.el9_8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-80489 | NONE0 | glibc 2.34-275.el9_8 fixed in 2.34-283.el9_8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-6791 | NONE0 | glibc-common 2.34-275.el9_8 fixed in 2.34-283.el9_8 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-77117 | NONE0 | glibc-common 2.34-275.el9_8 fixed in 2.34-283.el9_8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-80489 | NONE0 | glibc-common 2.34-275.el9_8 fixed in 2.34-283.el9_8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-6791 | NONE0 | glibc-langpack-en 2.34-275.el9_8 fixed in 2.34-283.el9_8 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-77117 | NONE0 | glibc-langpack-en 2.34-275.el9_8 fixed in 2.34-283.el9_8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-80489 | NONE0 | glibc-langpack-en 2.34-275.el9_8 fixed in 2.34-283.el9_8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-6791 | NONE0 | glibc-minimal-langpack 2.34-275.el9_8 fixed in 2.34-283.el9_8 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-77117 | NONE0 | glibc-minimal-langpack 2.34-275.el9_8 fixed in 2.34-283.el9_8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-80489 | NONE0 | glibc-minimal-langpack 2.34-275.el9_8 fixed in 2.34-283.el9_8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-67693 | NONE0 | gnutls 3.8.10-8.el9_8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-46675 | NONE0 | libpng 2:1.6.37-15.el9_8.2 No fix yet | — | Not Applicable |
| CVE-2026-0990 | NONE0 | libxml2 2.9.13-14.el9_8.2 No fix yet | 1.0% Theoretical Threat | Not Applicable |
| CVE-2026-54872 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-72897 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-75805 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-77696 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-49919 | NONE0 | freetype 2.10.4-10.el9_5 No fix yet | <0.1% Theoretical Threat | Not Applicable |
| CVE-2026-15003 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-11081 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-19548 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-6844 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-90830 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-16730 | NONE0 | dbus-broker 28-7.el9 fixed in 28-9.el9_8 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-32776 | NONE0 | expat 2.5.0-6.el9_8.1 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-32777 | NONE0 | expat 2.5.0-6.el9_8.1 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-32778 | NONE0 | expat 2.5.0-6.el9_8.1 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-95512 | NONE0 | freetype 2.10.4-10.el9_5 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-6368 | NONE0 | glibc 2.34-275.el9_8 fixed in 2.34-283.el9_8 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-6368 | NONE0 | glibc-common 2.34-275.el9_8 fixed in 2.34-283.el9_8 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-6368 | NONE0 | glibc-langpack-en 2.34-275.el9_8 fixed in 2.34-283.el9_8 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-6368 | NONE0 | glibc-minimal-langpack 2.34-275.el9_8 fixed in 2.34-283.el9_8 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2025-60753 | NONE0 | libarchive 3.5.3-11.el9_8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-5745 | NONE0 | libarchive 3.5.3-11.el9_8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-82327 | NONE0 | libsolv 0.7.24-6.el9_8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-50812 | NONE0 | sqlite-libs 3.34.1-10.el9_8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-15059 | NONE0 | systemd 252-67.el9_8.4 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-15059 | NONE0 | systemd-libs 252-67.el9_8.4 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-15059 | NONE0 | systemd-pam 252-67.el9_8.4 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-15059 | NONE0 | systemd-rpm-macros 252-67.el9_8.4 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-1489 | NONE0 | glib2 2.68.4-19.el9_8.9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-40930 | NONE0 | libpng 2:1.6.37-15.el9_8.2 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-4873 | NONE0 | curl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-6253 | NONE0 | curl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.7% Theoretical Threat | Not Applicable |
| CVE-2026-7168 | NONE0 | curl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-23865 | NONE0 | freetype 2.10.4-10.el9_5 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-86469 | NONE0 | glib2 2.68.4-19.el9_8.9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-8674 | NONE0 | glibc 2.34-275.el9_8 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-8674 | NONE0 | glibc-common 2.34-275.el9_8 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-8674 | NONE0 | glibc-langpack-en 2.34-275.el9_8 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-8674 | NONE0 | glibc-minimal-langpack 2.34-275.el9_8 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-22693 | NONE0 | harfbuzz 2.7.4-10.el9 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2023-30571 | NONE0 | libarchive 3.5.3-11.el9_8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-13595 | NONE0 | libblkid 2.37.4-25.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-4873 | NONE0 | libcurl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-6253 | NONE0 | libcurl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.7% Theoretical Threat | Not Applicable |
| CVE-2026-7168 | NONE0 | libcurl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-13595 | NONE0 | libfdisk 2.37.4-25.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-13595 | NONE0 | libmount 2.37.4-25.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-13595 | NONE0 | libsmartcols 2.37.4-25.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-13595 | NONE0 | libuuid 2.37.4-25.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-42772 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-54873 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 No fix yet | 0.7% Theoretical Threat | Not Applicable |
| CVE-2026-75804 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-75806 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 No fix yet | 1.1% Low-Moderate Risk | Not Applicable |
| CVE-2026-84784 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-13595 | NONE0 | util-linux-core 2.37.4-25.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-34743 | NONE0 | xz-libs 5.2.5-8.el9_0 fixed in 5.2.5-8.el9_8.1 | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-6845 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-90802 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-42250 | NONE0 | bzip2-libs 1.0.8-11.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-11850 | NONE0 | krb5-libs 1.21.1-10.el9_8 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-28164 | NONE0 | libpng 2:1.6.37-15.el9_8.2 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-18374 | NONE0 | glibc 2.34-275.el9_8 fixed in 2.34-283.el9_8 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-18374 | NONE0 | glibc-common 2.34-275.el9_8 fixed in 2.34-283.el9_8 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-18374 | NONE0 | glibc-langpack-en 2.34-275.el9_8 fixed in 2.34-283.el9_8 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-18374 | NONE0 | glibc-minimal-langpack 2.34-275.el9_8 fixed in 2.34-283.el9_8 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-107708 | NONE0 | krb5-libs 1.21.1-10.el9_8 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2025-14017 | NONE0 | curl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2025-14017 | NONE0 | libcurl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-54411 | NONE0 | pam 1.5.1-28.el9 fixed in 1.5.1-28.el9_8.1 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-27456 | NONE0 | libblkid 2.37.4-25.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-27456 | NONE0 | libfdisk 2.37.4-25.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-27456 | NONE0 | libmount 2.37.4-25.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-27456 | NONE0 | libsmartcols 2.37.4-25.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-27456 | NONE0 | libuuid 2.37.4-25.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-54875 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-27456 | NONE0 | util-linux-core 2.37.4-25.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-56131 | NONE0 | expat 2.5.0-6.el9_8.1 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-64505 | NONE0 | libpng 2:1.6.37-15.el9_8.2 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-34757 | NONE0 | libpng 2:1.6.37-15.el9_8.2 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-1484 | NONE0 | glib2 2.68.4-19.el9_8.9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-19542 | NONE0 | glibc 2.34-275.el9_8 fixed in 2.34-283.el9_8 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-89092 | NONE0 | glibc 2.34-275.el9_8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-19542 | NONE0 | glibc-common 2.34-275.el9_8 fixed in 2.34-283.el9_8 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-89092 | NONE0 | glibc-common 2.34-275.el9_8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-19542 | NONE0 | glibc-langpack-en 2.34-275.el9_8 fixed in 2.34-283.el9_8 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-89092 | NONE0 | glibc-langpack-en 2.34-275.el9_8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-19542 | NONE0 | glibc-minimal-langpack 2.34-275.el9_8 fixed in 2.34-283.el9_8 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-89092 | NONE0 | glibc-minimal-langpack 2.34-275.el9_8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2021-3826 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 1.5% Low-Moderate Risk | Not Applicable |
| CVE-2022-38533 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2022-44840 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2022-47007 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2022-47008 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2022-47010 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2022-47011 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2023-1972 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.9% Theoretical Threat | Not Applicable |
| CVE-2024-57360 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-11412 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-11413 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-11414 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-11494 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-11495 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-1153 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 1.4% Low-Moderate Risk | Not Applicable |
| CVE-2025-11839 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-11840 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-3198 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-66864 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-66866 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-69649 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-69650 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2025-69651 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2024-11053 | NONE0 | curl-minimal 7.76.1-40.el9_8.5 No fix yet | 2.0% Low-Moderate Risk | Not Applicable |
| CVE-2024-7264 | NONE0 | curl-minimal 7.76.1-40.el9_8.5 No fix yet | 20.2% High Exploitation Risk | Not Applicable |
| CVE-2024-9681 | NONE0 | curl-minimal 7.76.1-40.el9_8.5 No fix yet | 2.0% Low-Moderate Risk | Not Applicable |
| CVE-2025-14524 | NONE0 | curl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.7% Theoretical Threat | Not Applicable |
| CVE-2025-15079 | NONE0 | curl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2025-15224 | NONE0 | curl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-6276 | NONE0 | curl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-86409 | NONE0 | curl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-86414 | NONE0 | curl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-92390 | NONE0 | curl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2024-25260 | NONE0 | elfutils-debuginfod-client 0.194-1.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-1371 | NONE0 | elfutils-debuginfod-client 0.194-1.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-1376 | NONE0 | elfutils-debuginfod-client 0.194-1.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-1377 | NONE0 | elfutils-debuginfod-client 0.194-1.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2024-25260 | NONE0 | elfutils-default-yama-scope 0.194-1.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-1371 | NONE0 | elfutils-default-yama-scope 0.194-1.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-1376 | NONE0 | elfutils-default-yama-scope 0.194-1.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-1377 | NONE0 | elfutils-default-yama-scope 0.194-1.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2024-25260 | NONE0 | elfutils-libelf 0.194-1.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-1371 | NONE0 | elfutils-libelf 0.194-1.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-1376 | NONE0 | elfutils-libelf 0.194-1.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-1377 | NONE0 | elfutils-libelf 0.194-1.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2024-25260 | NONE0 | elfutils-libs 0.194-1.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-1371 | NONE0 | elfutils-libs 0.194-1.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-1376 | NONE0 | elfutils-libs 0.194-1.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-1377 | NONE0 | elfutils-libs 0.194-1.el9 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-66382 | NONE0 | expat 2.5.0-6.el9_8.1 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2023-4156 | NONE0 | gawk 5.1.0-6.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2023-32636 | NONE0 | glib2 2.68.4-19.el9_8.9 No fix yet | 0.8% Theoretical Threat | Not Applicable |
| CVE-2026-15028 | NONE0 | libarchive 3.5.3-11.el9_8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-1632 | NONE0 | libarchive 3.5.3-11.el9_8 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2025-5915 | NONE0 | libarchive 3.5.3-11.el9_8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-5916 | NONE0 | libarchive 3.5.3-11.el9_8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-5917 | NONE0 | libarchive 3.5.3-11.el9_8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-5918 | NONE0 | libarchive 3.5.3-11.el9_8 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2024-11053 | NONE0 | libcurl-minimal 7.76.1-40.el9_8.5 No fix yet | 2.0% Low-Moderate Risk | Not Applicable |
| CVE-2024-7264 | NONE0 | libcurl-minimal 7.76.1-40.el9_8.5 No fix yet | 20.2% High Exploitation Risk | Not Applicable |
| CVE-2024-9681 | NONE0 | libcurl-minimal 7.76.1-40.el9_8.5 No fix yet | 2.0% Low-Moderate Risk | Not Applicable |
| CVE-2025-14524 | NONE0 | libcurl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.7% Theoretical Threat | Not Applicable |
| CVE-2025-15079 | NONE0 | libcurl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2025-15224 | NONE0 | libcurl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-6276 | NONE0 | libcurl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-86409 | NONE0 | libcurl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-86414 | NONE0 | libcurl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-92390 | NONE0 | libcurl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2021-46195 | NONE0 | libgcc 11.5.0-14.el9 No fix yet | 0.8% Theoretical Threat | Not Applicable |
| CVE-2022-27943 | NONE0 | libgcc 11.5.0-14.el9 No fix yet | 1.0% Theoretical Threat | Not Applicable |
| CVE-2021-46195 | NONE0 | libstdc++ 11.5.0-14.el9 No fix yet | 0.8% Theoretical Threat | Not Applicable |
| CVE-2022-27943 | NONE0 | libstdc++ 11.5.0-14.el9 No fix yet | 1.0% Theoretical Threat | Not Applicable |
| CVE-2023-45322 | NONE0 | libxml2 2.9.13-14.el9_8.2 No fix yet | 1.0% Theoretical Threat | Not Applicable |
| CVE-2025-27113 | NONE0 | libxml2 2.9.13-14.el9_8.2 No fix yet | 1.1% Low-Moderate Risk | Not Applicable |
| CVE-2024-13176 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2024-41996 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 No fix yet | 1.1% Low-Moderate Risk | Not Applicable |
| CVE-2026-14457 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 fixed in 1:3.5.8-1.el9_8 | 1.2% Low-Moderate Risk | Not Applicable |
| CVE-2026-28387 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 No fix yet | 0.7% Theoretical Threat | Not Applicable |
| CVE-2026-28388 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 No fix yet | 0.9% Theoretical Threat | Not Applicable |
| CVE-2026-28389 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 No fix yet | 0.8% Theoretical Threat | Not Applicable |
| CVE-2026-31789 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-42765 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-54874 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 fixed in 1:3.5.8-1.el9_8 | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-63073 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 fixed in 1:3.5.8-1.el9_8 | 1.2% Low-Moderate Risk | Not Applicable |
| CVE-2026-63074 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 fixed in 1:3.5.8-1.el9_8 | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-63075 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 fixed in 1:3.5.8-1.el9_8 | 0.6% Theoretical Threat | Not Applicable |
| CVE-2022-41409 | NONE0 | pcre2 10.40-6.el9 No fix yet | 1.1% Low-Moderate Risk | Not Applicable |
| CVE-2026-89156 | NONE0 | pcre2 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-89160 | NONE0 | pcre2 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2022-41409 | NONE0 | pcre2-syntax 10.40-6.el9 No fix yet | 1.1% Low-Moderate Risk | Not Applicable |
| CVE-2026-89156 | NONE0 | pcre2-syntax 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-89160 | NONE0 | pcre2-syntax 10.40-6.el9 fixed in 10.40-7.el9_8 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-44605 | NONE0 | rpm-libs 4.16.1.3-40.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2024-0232 | NONE0 | sqlite-libs 3.34.1-10.el9_8 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-27171 | NONE0 | zlib 1.2.11-40.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-1152 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-18924 | NONE0 | curl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-80230 | NONE0 | curl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-87864 | NONE0 | curl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-92389 | NONE0 | curl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-92391 | NONE0 | curl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-41080 | NONE0 | expat 2.5.0-6.el9_8.1 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-3360 | NONE0 | glib2 2.68.4-19.el9_8.9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2025-7039 | NONE0 | glib2 2.68.4-19.el9_8.9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-0988 | NONE0 | glib2 2.68.4-19.el9_8.9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-97399 | NONE0 | glibc 2.34-275.el9_8 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-97399 | NONE0 | glibc-common 2.34-275.el9_8 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-97399 | NONE0 | glibc-langpack-en 2.34-275.el9_8 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-97399 | NONE0 | glibc-minimal-langpack 2.34-275.el9_8 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-18924 | NONE0 | libcurl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-80230 | NONE0 | libcurl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-87864 | NONE0 | libcurl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-92389 | NONE0 | libcurl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-92391 | NONE0 | libcurl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-0989 | NONE0 | libxml2 2.9.13-14.el9_8.2 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-35189 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-35191 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 No fix yet | 0.7% Theoretical Threat | Not Applicable |
| CVE-2026-75803 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 fixed in 1:3.5.8-1.el9_8 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-17591 | NONE0 | libarchive 3.5.3-11.el9_8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-66861 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2025-66862 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-66863 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-66865 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-69647 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-69648 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-69652 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-94266 | NONE0 | curl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-94266 | NONE0 | libcurl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-41990 | NONE0 | libgcrypt 1.10.0-13.el9_8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-70873 | NONE0 | sqlite-libs 3.34.1-10.el9_8 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2025-1150 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2025-1151 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2026-82209 | NONE0 | curl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-82209 | NONE0 | libcurl-minimal 7.76.1-40.el9_8.5 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-9232 | NONE0 | openssl-libs 1:3.5.5-6.el9_8 No fix yet | 2.0% Low-Moderate Risk | Not Applicable |
| CVE-2026-0992 | NONE0 | libxml2 2.9.13-14.el9_8.2 No fix yet | 0.5% Theoretical Threat | Not Applicable |
| CVE-2025-69644 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2025-69645 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-69646 | NONE0 | binutils-gold 2.35.2-72.el9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-1485 | NONE0 | glib2 2.68.4-19.el9_8.9 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-24515 | NONE0 | expat 2.5.0-6.el9_8.1 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-18739 | NONE0 | popt 1.18-8.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-18743 | NONE0 | popt 1.18-8.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-18839 | NONE0 | popt 1.18-8.el9 No fix yet | 0.1% Theoretical Threat | Not Applicable |
Which CVEs are actually reachable — is the vulnerable code even linked and callable.
Live-container probes: default user, writable paths, capabilities, exposed ports.
Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.
A step-by-step hardened build plan, with parity tests proving nothing breaks.
Want to check another image? Run a full scan with the Docker Security Scanner.