Vulnerability Reportgitlab/gitlab-ce:18.11.8-ce.0

gitlab/gitlab-ce:18.11.8-ce.0
digestsha256:e75c92b271a58683c56e3144eda03c70c0eb5a6561d0fc2b2a64934964bfc003

Executive Summary

Last scanned:

Threat Score
50/100CAUTION
Reputation
RELIABLE

This image carries significant risk; production deployment is highly discouraged without strict compensating controls. An attacker could exploit OpenSSL CMS and DTLS parsing paths to cause denial of service or expose heap memory, as seen in CVE-2026-63072 and CVE-2026-84782. Network controls that prevent untrusted clients from reaching CMS/DTLS endpoints fully eliminate the practical reachability of those specific issues. The image has 93 exposed findings, including 6 at severity 6.0 or higher, but none at severity 7.0 or higher, and post-exploit findings are low severity. Patching the affected OpenSSL, Perl, and PCRE2 packages is still recommended to reduce the exposed surface.

Vulnerabilities

Vulnerability Log

215 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-57433MEDIUM6.38
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-9538MEDIUM6.38
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-63072MEDIUM6.38
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
0.9%
Theoretical Threat
Directly Exposed
CVE-2026-63074MEDIUM6.38
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-89157MEDIUM6.29
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-84782MEDIUM6.29
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-53612MEDIUM5.95
libblkid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53613MEDIUM5.95
libblkid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53614MEDIUM5.95
libblkid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53612MEDIUM5.95
libmount1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53613MEDIUM5.95
libmount1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53614MEDIUM5.95
libmount1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53612MEDIUM5.95
libsmartcols1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53613MEDIUM5.95
libsmartcols1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53614MEDIUM5.95
libsmartcols1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53612MEDIUM5.95
libuuid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53613MEDIUM5.95
libuuid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53614MEDIUM5.95
libuuid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2024-2236MEDIUM5.9
libgcrypt20
1.10.3-2ubuntu0.1
fixed in 1.10.3-2ubuntu0.2
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-19499MEDIUM5.78
libc-bin
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-19499MEDIUM5.78
libc6
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-89158MEDIUM5.52
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-89160MEDIUM5.52
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-15649MEDIUM5.52
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-19487MEDIUM5.52
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.6
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-106552MEDIUM5.52
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-106585MEDIUM5.52
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-106552MEDIUM5.52
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-106585MEDIUM5.52
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-54371MEDIUM5.35
libattr1
1:2.5.2-1build1.1
fixed in 1:2.5.2-1ubuntu0.1
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-13757MEDIUM5.27
libp11-kit0
0.25.3-4ubuntu2.1
fixed in 0.25.3-4ubuntu2.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-18938MEDIUM5.27
libp11-kit0
0.25.3-4ubuntu2.1
fixed in 0.25.3-4ubuntu2.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-106553MEDIUM5.1
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.1%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-106555MEDIUM5.1
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.1%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-6791MEDIUM5.02
libc-bin
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-77117MEDIUM5.02
libc-bin
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-80489MEDIUM5.02
libc-bin
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-6791MEDIUM5.02
libc6
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-77117MEDIUM5.02
libc6
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-80489MEDIUM5.02
libc6
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-89156MEDIUM5.02
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-54872MEDIUM5.02
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-75805MEDIUM5.02
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-77696MEDIUM5.02
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-15534MEDIUM4.84
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.6
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-73282MEDIUM4.76
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.19
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-73282MEDIUM4.76
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.19
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-6368MEDIUM4.67
libc-bin
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-6368MEDIUM4.67
libc6
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-15059MEDIUM4.67
libsystemd0
255.4-1ubuntu8.16
fixed in 255.4-1ubuntu8.17
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-15059MEDIUM4.67
libudev1
255.4-1ubuntu8.16
fixed in 255.4-1ubuntu8.17
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27171MEDIUM4.67
zlib1g
1:1.3.dfsg-3.1ubuntu2.1
fixed in 1:1.3.dfsg-3.1ubuntu2.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-73283MEDIUM4.59
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.19
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-73283MEDIUM4.59
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.19
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libblkid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libmount1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-12087MEDIUM4.5
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libsmartcols1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-75806MEDIUM4.5
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libuuid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-42250MEDIUM4.25
libbz2-1.0
1.0.8-5.1build0.1
fixed in 1.0.8-5.1ubuntu0.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-48959MEDIUM4.25
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-18374MEDIUM4.17
libc-bin
2.39-0ubuntu8.8
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-18374MEDIUM4.17
libc6
2.39-0ubuntu8.8
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libblkid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libmount1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libsmartcols1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libuuid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-106583LOW3.98
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-48962LOW3.98
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-48962LOW3.98
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-48962LOW3.98
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-41992LOW3.82
gzip
1.12-1ubuntu3.1
fixed in 1.12-1ubuntu3.2
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-106553LOW3.82
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-106555LOW3.82
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-63072LOW3.82
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
0.9%
Theoretical Threat
Post-Exploit
CVE-2026-54874LOW3.82
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-63074LOW3.82
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-57433LOW3.82
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-9538LOW3.82
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-57433LOW3.82
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-9538LOW3.82
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-57433LOW3.82
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-9538LOW3.82
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-84782LOW3.77
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.4%
Theoretical Threat
Post-Exploit
CVE-2021-31879LOW3.66
wget
1.21.4-1ubuntu4.4
No fix yet
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-106586LOW3.65
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-106586LOW3.65
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53612LOW3.57
bsdutils
1:2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-53613LOW3.57
bsdutils
1:2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-53614LOW3.57
bsdutils
1:2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-53612LOW3.57
mount
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-53613LOW3.57
mount
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-53614LOW3.57
mount
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-53612LOW3.57
util-linux
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-53613LOW3.57
util-linux
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-53614LOW3.57
util-linux
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-19542LOW3.57
libc-bin
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-89092LOW3.57
libc-bin
2.39-0ubuntu8.8
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-19542LOW3.57
libc6
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-89092LOW3.57
libc6
2.39-0ubuntu8.8
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-106552LOW3.31
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-106585LOW3.31
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-15649LOW3.31
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-19487LOW3.31
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.6
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-15649LOW3.31
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-19487LOW3.31
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.6
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-15649LOW3.31
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-19487LOW3.31
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.6
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-35189LOW3.15
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-75803LOW3.15
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-106582LOW3.15
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-106582LOW3.15
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-54872LOW3.01
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-75805LOW3.01
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-77696LOW3.01
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-73281LOW2.98
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.19
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-73281LOW2.98
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.19
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-15534LOW2.91
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.6
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-15534LOW2.91
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.6
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-15534LOW2.91
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.6
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-73282LOW2.86
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.19
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-45582LOW2.86
tar
1.35+dfsg-3build1
fixed in 1.35+dfsg-3ubuntu0.2
0.5%
Theoretical Threat
Post-Exploit
CVE-2023-42366LOW2.8
busybox
1:1.36.1-6ubuntu3.1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-102473LOW2.8
dash
0.5.12-6ubuntu5
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-5704LOW2.8
tar
1.35+dfsg-3build1
fixed in 1.35+dfsg-3ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-40228LOW2.8
libsystemd0
255.4-1ubuntu8.16
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-40228LOW2.8
libudev1
255.4-1ubuntu8.16
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-106584LOW2.8
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-106587LOW2.8
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-106584LOW2.8
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-106587LOW2.8
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-13221LOW2.78
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13221LOW2.78
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13221LOW2.78
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13221LOW2.78
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-60876LOW2.75
busybox
1:1.36.1-6ubuntu3.1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-73283LOW2.75
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.19
<0.1%
Theoretical Threat
Post-Exploit
CVE-2026-63076LOW2.7
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
1.6%
Low-Moderate Risk
Post-Exploit
CVE-2026-63076LOW2.7
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
1.6%
Low-Moderate Risk
Post-Exploit
CVE-2026-13595LOW2.7
bsdutils
1:2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53910LOW2.7
diffutils
1:3.10-1build1
fixed in 1:3.10-1ubuntu0.1
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-13595LOW2.7
mount
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-75806LOW2.7
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-12087LOW2.7
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-12087LOW2.7
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-12087LOW2.7
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13595LOW2.7
util-linux
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-16742LOW2.69
libsystemd0
255.4-1ubuntu8.16
fixed in 255.4-1ubuntu8.17
<0.1%
Theoretical Threat
Post-Exploit
CVE-2026-16742LOW2.69
libudev1
255.4-1ubuntu8.16
fixed in 255.4-1ubuntu8.17
<0.1%
Theoretical Threat
Post-Exploit
CVE-2026-57432LOW2.57
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-57432LOW2.57
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-57432LOW2.57
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-57432LOW2.57
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-48959LOW2.55
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-48959LOW2.55
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-48959LOW2.55
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-86145LOW2.51
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-53615LOW2.45
bsdutils
1:2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53615LOW2.45
libblkid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53615LOW2.45
libmount1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53615LOW2.45
libsmartcols1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53615LOW2.45
libuuid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53615LOW2.45
mount
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53615LOW2.45
util-linux
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
bsdutils
1:2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-41991LOW2.4
gzip
1.12-1ubuntu3.1
fixed in 1.12-1ubuntu3.2
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
mount
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
util-linux
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-89161LOW2.39
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-48962LOW2.39
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-106583LOW2.39
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-106583LOW2.39
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-103111LOW2.33
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-54874LOW2.29
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-106553LOW2.29
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-106555LOW2.29
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-5278LOW2.24
coreutils
9.4-3ubuntu6.2
fixed in 9.4-3ubuntu6.3
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-18477LOW2.24
tar
1.35+dfsg-3build1
No fix yet
<0.1%
Theoretical Threat
Post-Exploit
CVE-2026-18508LOW2.24
tar
1.35+dfsg-3build1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-106586LOW2.19
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-102474LOW2.04
dash
0.5.12-6ubuntu5
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-106582LOW1.89
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-35189LOW1.89
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-75803LOW1.89
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
0.2%
Theoretical Threat
Post-Exploit
CVE-2024-56433LOW1.84
passwd
1:4.13+dfsg1-4ubuntu3.2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-73281LOW1.78
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.19
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-46394LOW1.68
busybox
1:1.36.1-6ubuntu3.1
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-106584LOW1.68
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
<0.1%
Theoretical Threat
Post-Exploit
CVE-2026-106587LOW1.68
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
<0.1%
Theoretical Threat
Post-Exploit
CVE-2025-69720NONE0
libncursesw6
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.1
0.5%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
libtinfo6
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.1
0.5%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
ncurses-base
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.1
0.5%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
ncurses-bin
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.1
0.5%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-modules
1.5.3-5ubuntu5.5
fixed in 1.5.3-5ubuntu5.6
0.5%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-modules-bin
1.5.3-5ubuntu5.5
fixed in 1.5.3-5ubuntu5.6
0.5%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-runtime
1.5.3-5ubuntu5.5
fixed in 1.5.3-5ubuntu5.6
0.5%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam0g
1.5.3-5ubuntu5.5
fixed in 1.5.3-5ubuntu5.6
0.5%
Theoretical Threat
Not Applicable
CVE-2024-56433NONE0
login
1:4.13+dfsg1-4ubuntu3.2
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2025-6141NONE0
libncursesw6
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.2
0.2%
Theoretical Threat
Not Applicable
CVE-2025-6141NONE0
libtinfo6
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.2
0.2%
Theoretical Threat
Not Applicable
CVE-2025-6141NONE0
ncurses-base
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.2
0.2%
Theoretical Threat
Not Applicable
CVE-2025-6141NONE0
ncurses-bin
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.2
0.2%
Theoretical Threat
Not Applicable
CVE-2026-57062NONE0
gpgv
2.4.4-2ubuntu17.4
fixed in 2.4.4-2ubuntu17.6
0.1%
Theoretical Threat
Not Applicable
CVE-2024-58251NONE0
busybox
1:1.36.1-6ubuntu3.1
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-67693NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.6
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-88647NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.6
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-95184NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.6
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-95209NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.6
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-95210NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.6
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-7017NONE0
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.2%
Theoretical Threat
Not Applicable
CVE-2026-7017NONE0
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.2%
Theoretical Threat
Not Applicable
CVE-2026-7017NONE0
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.2%
Theoretical Threat
Not Applicable
CVE-2026-7017NONE0
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.2%
Theoretical Threat
Not Applicable
CVE-2026-85091NONE0
zlib1g
1:1.3.dfsg-3.1ubuntu2.1
No fix yet
0.4%
Theoretical Threat
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Supply chain analysis

Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.