Last scanned:
This image carries significant risk; production deployment is highly discouraged without strict compensating controls. An attacker could primarily cause denial of service, and in the OpenSSL DTLS case potentially disclose heap memory, by exploiting reachable code paths such as CVE-2026-63072 or CVE-2026-84782. The exposed surface contains 97 total findings, including 6 at severity 6.0 or higher and a maximum exposed severity of 6.38, while the 105 post-exploit findings have a maximum severity of 3.98. Several findings are conditional, for example the PCRE2 issue is 32-bit-only and the CMP issue requires a long-lived reused context, so actual exposure depends on how GitLab invokes these libraries. No single compensating control from the provided inputs fully eliminates the cited library risks; apply upstream fixes and restrict untrusted network inputs where possible.
| CVE ID | Adjusted Severity | Package | Exploit Probability | Risk Context |
|---|---|---|---|---|
| CVE-2026-57433 | MEDIUM6.38 | libperl5.38t64 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.4 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-9538 | MEDIUM6.38 | libperl5.38t64 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.4 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-63072 | MEDIUM6.38 | libssl3t64 3.0.13-0ubuntu3.12 fixed in 3.0.13-0ubuntu3.15 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2026-63074 | MEDIUM6.38 | libssl3t64 3.0.13-0ubuntu3.12 fixed in 3.0.13-0ubuntu3.15 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-89157 | MEDIUM6.29 | libpcre2-8-0 10.42-4ubuntu2.1 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-84782 | MEDIUM6.29 | libssl3t64 3.0.13-0ubuntu3.12 fixed in 3.0.13-0ubuntu3.16 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-53612 | MEDIUM5.95 | libblkid1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53613 | MEDIUM5.95 | libblkid1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53614 | MEDIUM5.95 | libblkid1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53612 | MEDIUM5.95 | libmount1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53613 | MEDIUM5.95 | libmount1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53614 | MEDIUM5.95 | libmount1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53612 | MEDIUM5.95 | libsmartcols1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53613 | MEDIUM5.95 | libsmartcols1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53614 | MEDIUM5.95 | libsmartcols1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53612 | MEDIUM5.95 | libuuid1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53613 | MEDIUM5.95 | libuuid1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53614 | MEDIUM5.95 | libuuid1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2024-2236 | MEDIUM5.9 | libgcrypt20 1.10.3-2ubuntu0.1 fixed in 1.10.3-2ubuntu0.2 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-19499 | MEDIUM5.78 | libc-bin 2.39-0ubuntu8.8 fixed in 2.39-0ubuntu8.9 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-19499 | MEDIUM5.78 | libc6 2.39-0ubuntu8.8 fixed in 2.39-0ubuntu8.9 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-89158 | MEDIUM5.52 | libpcre2-8-0 10.42-4ubuntu2.1 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-89160 | MEDIUM5.52 | libpcre2-8-0 10.42-4ubuntu2.1 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-15649 | MEDIUM5.52 | libperl5.38t64 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.4 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-19487 | MEDIUM5.52 | libperl5.38t64 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.6 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-106552 | MEDIUM5.52 | openssh-server 1:9.6p1-3ubuntu13.18 fixed in 1:9.6p1-3ubuntu13.20 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-106585 | MEDIUM5.52 | openssh-server 1:9.6p1-3ubuntu13.18 fixed in 1:9.6p1-3ubuntu13.20 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-106552 | MEDIUM5.52 | openssh-sftp-server 1:9.6p1-3ubuntu13.18 fixed in 1:9.6p1-3ubuntu13.20 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-106585 | MEDIUM5.52 | openssh-sftp-server 1:9.6p1-3ubuntu13.18 fixed in 1:9.6p1-3ubuntu13.20 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-54371 | MEDIUM5.35 | libattr1 1:2.5.2-1build1.1 fixed in 1:2.5.2-1ubuntu0.1 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-13757 | MEDIUM5.27 | libp11-kit0 0.25.3-4ubuntu2.1 fixed in 0.25.3-4ubuntu2.2 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-18938 | MEDIUM5.27 | libp11-kit0 0.25.3-4ubuntu2.1 fixed in 0.25.3-4ubuntu2.2 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-106553 | MEDIUM5.1 | openssh-server 1:9.6p1-3ubuntu13.18 fixed in 1:9.6p1-3ubuntu13.20 | 0.1% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-106555 | MEDIUM5.1 | openssh-server 1:9.6p1-3ubuntu13.18 fixed in 1:9.6p1-3ubuntu13.20 | 0.1% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-6791 | MEDIUM5.02 | libc-bin 2.39-0ubuntu8.8 fixed in 2.39-0ubuntu8.9 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-77117 | MEDIUM5.02 | libc-bin 2.39-0ubuntu8.8 fixed in 2.39-0ubuntu8.9 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-80489 | MEDIUM5.02 | libc-bin 2.39-0ubuntu8.8 fixed in 2.39-0ubuntu8.9 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-6791 | MEDIUM5.02 | libc6 2.39-0ubuntu8.8 fixed in 2.39-0ubuntu8.9 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-77117 | MEDIUM5.02 | libc6 2.39-0ubuntu8.8 fixed in 2.39-0ubuntu8.9 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-80489 | MEDIUM5.02 | libc6 2.39-0ubuntu8.8 fixed in 2.39-0ubuntu8.9 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-89156 | MEDIUM5.02 | libpcre2-8-0 10.42-4ubuntu2.1 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-54872 | MEDIUM5.02 | libssl3t64 3.0.13-0ubuntu3.12 fixed in 3.0.13-0ubuntu3.16 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-75805 | MEDIUM5.02 | libssl3t64 3.0.13-0ubuntu3.12 fixed in 3.0.13-0ubuntu3.16 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-77696 | MEDIUM5.02 | libssl3t64 3.0.13-0ubuntu3.12 fixed in 3.0.13-0ubuntu3.16 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-15534 | MEDIUM4.84 | libperl5.38t64 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.6 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-73282 | MEDIUM4.76 | openssh-server 1:9.6p1-3ubuntu13.18 fixed in 1:9.6p1-3ubuntu13.19 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-73282 | MEDIUM4.76 | openssh-sftp-server 1:9.6p1-3ubuntu13.18 fixed in 1:9.6p1-3ubuntu13.19 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-6368 | MEDIUM4.67 | libc-bin 2.39-0ubuntu8.8 fixed in 2.39-0ubuntu8.9 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-6368 | MEDIUM4.67 | libc6 2.39-0ubuntu8.8 fixed in 2.39-0ubuntu8.9 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-15059 | MEDIUM4.67 | libsystemd0 255.4-1ubuntu8.16 fixed in 255.4-1ubuntu8.17 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-15059 | MEDIUM4.67 | libudev1 255.4-1ubuntu8.16 fixed in 255.4-1ubuntu8.17 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-27171 | MEDIUM4.67 | zlib1g 1:1.3.dfsg-3.1ubuntu2.1 fixed in 1:1.3.dfsg-3.1ubuntu2.2 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-73283 | MEDIUM4.59 | openssh-server 1:9.6p1-3ubuntu13.18 fixed in 1:9.6p1-3ubuntu13.19 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-73283 | MEDIUM4.59 | openssh-sftp-server 1:9.6p1-3ubuntu13.18 fixed in 1:9.6p1-3ubuntu13.19 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-13595 | MEDIUM4.5 | libblkid1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-13595 | MEDIUM4.5 | libmount1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-12087 | MEDIUM4.5 | libperl5.38t64 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.4 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-13595 | MEDIUM4.5 | libsmartcols1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-75806 | MEDIUM4.5 | libssl3t64 3.0.13-0ubuntu3.12 fixed in 3.0.13-0ubuntu3.16 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-13595 | MEDIUM4.5 | libuuid1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-42250 | MEDIUM4.25 | libbz2-1.0 1.0.8-5.1build0.1 fixed in 1.0.8-5.1ubuntu0.1 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-48959 | MEDIUM4.25 | libperl5.38t64 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.4 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-18374 | MEDIUM4.17 | libc-bin 2.39-0ubuntu8.8 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-18374 | MEDIUM4.17 | libc6 2.39-0ubuntu8.8 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-27456 | MEDIUM4 | libblkid1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-27456 | MEDIUM4 | libmount1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-27456 | MEDIUM4 | libsmartcols1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-27456 | MEDIUM4 | libuuid1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-106583 | LOW3.98 | openssh-client 1:9.6p1-3ubuntu13.18 fixed in 1:9.6p1-3ubuntu13.20 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-48962 | LOW3.98 | perl 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.4 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-48962 | LOW3.98 | perl-base 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.4 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-48962 | LOW3.98 | perl-modules-5.38 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.4 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-106553 | LOW3.82 | openssh-client 1:9.6p1-3ubuntu13.18 fixed in 1:9.6p1-3ubuntu13.20 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-106555 | LOW3.82 | openssh-client 1:9.6p1-3ubuntu13.18 fixed in 1:9.6p1-3ubuntu13.20 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-63072 | LOW3.82 | openssl 3.0.13-0ubuntu3.12 fixed in 3.0.13-0ubuntu3.15 | 0.9% Theoretical Threat | Post-Exploit |
| CVE-2026-54874 | LOW3.82 | openssl 3.0.13-0ubuntu3.12 fixed in 3.0.13-0ubuntu3.15 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-63074 | LOW3.82 | openssl 3.0.13-0ubuntu3.12 fixed in 3.0.13-0ubuntu3.15 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-57433 | LOW3.82 | perl 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.4 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-9538 | LOW3.82 | perl 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.4 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-57433 | LOW3.82 | perl-base 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.4 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-9538 | LOW3.82 | perl-base 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.4 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-57433 | LOW3.82 | perl-modules-5.38 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.4 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-9538 | LOW3.82 | perl-modules-5.38 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.4 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-84782 | LOW3.77 | openssl 3.0.13-0ubuntu3.12 fixed in 3.0.13-0ubuntu3.16 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2021-31879 | LOW3.66 | wget 1.21.4-1ubuntu4.4 No fix yet | 1.1% Low-Moderate Risk | Post-Exploit |
| CVE-2026-106586 | LOW3.65 | openssh-server 1:9.6p1-3ubuntu13.18 fixed in 1:9.6p1-3ubuntu13.20 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-106586 | LOW3.65 | openssh-sftp-server 1:9.6p1-3ubuntu13.18 fixed in 1:9.6p1-3ubuntu13.20 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-53612 | LOW3.57 | bsdutils 1:2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-53613 | LOW3.57 | bsdutils 1:2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-53614 | LOW3.57 | bsdutils 1:2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-53612 | LOW3.57 | mount 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-53613 | LOW3.57 | mount 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-53614 | LOW3.57 | mount 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-53612 | LOW3.57 | util-linux 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-53613 | LOW3.57 | util-linux 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-53614 | LOW3.57 | util-linux 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-19542 | LOW3.57 | libc-bin 2.39-0ubuntu8.8 fixed in 2.39-0ubuntu8.9 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-89092 | LOW3.57 | libc-bin 2.39-0ubuntu8.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-19542 | LOW3.57 | libc6 2.39-0ubuntu8.8 fixed in 2.39-0ubuntu8.9 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-89092 | LOW3.57 | libc6 2.39-0ubuntu8.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-106552 | LOW3.31 | openssh-client 1:9.6p1-3ubuntu13.18 fixed in 1:9.6p1-3ubuntu13.20 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-106585 | LOW3.31 | openssh-client 1:9.6p1-3ubuntu13.18 fixed in 1:9.6p1-3ubuntu13.20 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2025-15649 | LOW3.31 | perl 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.4 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-19487 | LOW3.31 | perl 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.6 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2025-15649 | LOW3.31 | perl-base 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.4 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-19487 | LOW3.31 | perl-base 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.6 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2025-15649 | LOW3.31 | perl-modules-5.38 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.4 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-19487 | LOW3.31 | perl-modules-5.38 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.6 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-35189 | LOW3.15 | libssl3t64 3.0.13-0ubuntu3.12 fixed in 3.0.13-0ubuntu3.16 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-75803 | LOW3.15 | libssl3t64 3.0.13-0ubuntu3.12 fixed in 3.0.13-0ubuntu3.15 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-106582 | LOW3.15 | openssh-server 1:9.6p1-3ubuntu13.18 fixed in 1:9.6p1-3ubuntu13.20 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-106582 | LOW3.15 | openssh-sftp-server 1:9.6p1-3ubuntu13.18 fixed in 1:9.6p1-3ubuntu13.20 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-54872 | LOW3.01 | openssl 3.0.13-0ubuntu3.12 fixed in 3.0.13-0ubuntu3.16 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-75805 | LOW3.01 | openssl 3.0.13-0ubuntu3.12 fixed in 3.0.13-0ubuntu3.16 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-77696 | LOW3.01 | openssl 3.0.13-0ubuntu3.12 fixed in 3.0.13-0ubuntu3.16 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-73281 | LOW2.98 | openssh-server 1:9.6p1-3ubuntu13.18 fixed in 1:9.6p1-3ubuntu13.19 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-73281 | LOW2.98 | openssh-sftp-server 1:9.6p1-3ubuntu13.18 fixed in 1:9.6p1-3ubuntu13.19 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-15534 | LOW2.91 | perl 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.6 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-15534 | LOW2.91 | perl-base 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.6 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-15534 | LOW2.91 | perl-modules-5.38 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.6 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-73282 | LOW2.86 | openssh-client 1:9.6p1-3ubuntu13.18 fixed in 1:9.6p1-3ubuntu13.19 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2023-42366 | LOW2.8 | busybox 1:1.36.1-6ubuntu3.1 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-102473 | LOW2.8 | dash 0.5.12-6ubuntu5 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2025-6141 | LOW2.8 | libncursesw6 6.4+20240113-1ubuntu2.1 fixed in 6.4+20240113-1ubuntu2.2 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-40228 | LOW2.8 | libsystemd0 255.4-1ubuntu8.16 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2025-6141 | LOW2.8 | libtinfo6 6.4+20240113-1ubuntu2.1 fixed in 6.4+20240113-1ubuntu2.2 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-40228 | LOW2.8 | libudev1 255.4-1ubuntu8.16 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2025-6141 | LOW2.8 | ncurses-base 6.4+20240113-1ubuntu2.1 fixed in 6.4+20240113-1ubuntu2.2 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-6141 | LOW2.8 | ncurses-bin 6.4+20240113-1ubuntu2.1 fixed in 6.4+20240113-1ubuntu2.2 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-106584 | LOW2.8 | openssh-server 1:9.6p1-3ubuntu13.18 fixed in 1:9.6p1-3ubuntu13.20 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-106587 | LOW2.8 | openssh-server 1:9.6p1-3ubuntu13.18 fixed in 1:9.6p1-3ubuntu13.20 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-106584 | LOW2.8 | openssh-sftp-server 1:9.6p1-3ubuntu13.18 fixed in 1:9.6p1-3ubuntu13.20 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-106587 | LOW2.8 | openssh-sftp-server 1:9.6p1-3ubuntu13.18 fixed in 1:9.6p1-3ubuntu13.20 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-13221 | LOW2.78 | libperl5.38t64 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.4 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-13221 | LOW2.78 | perl 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.4 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-13221 | LOW2.78 | perl-base 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.4 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-13221 | LOW2.78 | perl-modules-5.38 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.4 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2025-60876 | LOW2.75 | busybox 1:1.36.1-6ubuntu3.1 No fix yet | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-73283 | LOW2.75 | openssh-client 1:9.6p1-3ubuntu13.18 fixed in 1:9.6p1-3ubuntu13.19 | <0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-63076 | LOW2.7 | libssl3t64 3.0.13-0ubuntu3.12 fixed in 3.0.13-0ubuntu3.15 | 1.6% Low-Moderate Risk | Post-Exploit |
| CVE-2026-63076 | LOW2.7 | openssl 3.0.13-0ubuntu3.12 fixed in 3.0.13-0ubuntu3.15 | 1.6% Low-Moderate Risk | Post-Exploit |
| CVE-2026-13595 | LOW2.7 | bsdutils 1:2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53910 | LOW2.7 | diffutils 1:3.10-1build1 fixed in 1:3.10-1ubuntu0.1 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-13595 | LOW2.7 | mount 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-75806 | LOW2.7 | openssl 3.0.13-0ubuntu3.12 fixed in 3.0.13-0ubuntu3.16 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-12087 | LOW2.7 | perl 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.4 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-12087 | LOW2.7 | perl-base 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.4 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-12087 | LOW2.7 | perl-modules-5.38 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.4 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-13595 | LOW2.7 | util-linux 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-16742 | LOW2.69 | libsystemd0 255.4-1ubuntu8.16 fixed in 255.4-1ubuntu8.17 | <0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-16742 | LOW2.69 | libudev1 255.4-1ubuntu8.16 fixed in 255.4-1ubuntu8.17 | <0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-57432 | LOW2.57 | libperl5.38t64 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.4 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-57432 | LOW2.57 | perl 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.4 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-57432 | LOW2.57 | perl-base 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.4 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-57432 | LOW2.57 | perl-modules-5.38 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.4 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-48959 | LOW2.55 | perl 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.4 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-48959 | LOW2.55 | perl-base 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.4 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-48959 | LOW2.55 | perl-modules-5.38 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.4 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-86145 | LOW2.51 | libpcre2-8-0 10.42-4ubuntu2.1 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-53615 | LOW2.45 | bsdutils 1:2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53615 | LOW2.45 | libblkid1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53615 | LOW2.45 | libmount1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53615 | LOW2.45 | libsmartcols1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53615 | LOW2.45 | libuuid1 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53615 | LOW2.45 | mount 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53615 | LOW2.45 | util-linux 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-27456 | LOW2.4 | bsdutils 1:2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-27456 | LOW2.4 | mount 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-27456 | LOW2.4 | util-linux 2.39.3-9ubuntu6.5 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-89161 | LOW2.39 | libpcre2-8-0 10.42-4ubuntu2.1 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-48962 | LOW2.39 | libperl5.38t64 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.4 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-106583 | LOW2.39 | openssh-server 1:9.6p1-3ubuntu13.18 fixed in 1:9.6p1-3ubuntu13.20 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-106583 | LOW2.39 | openssh-sftp-server 1:9.6p1-3ubuntu13.18 fixed in 1:9.6p1-3ubuntu13.20 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-103111 | LOW2.33 | libpcre2-8-0 10.42-4ubuntu2.1 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-54874 | LOW2.29 | libssl3t64 3.0.13-0ubuntu3.12 fixed in 3.0.13-0ubuntu3.15 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-106553 | LOW2.29 | openssh-sftp-server 1:9.6p1-3ubuntu13.18 fixed in 1:9.6p1-3ubuntu13.20 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-106555 | LOW2.29 | openssh-sftp-server 1:9.6p1-3ubuntu13.18 fixed in 1:9.6p1-3ubuntu13.20 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2025-5278 | LOW2.24 | coreutils 9.4-3ubuntu6.2 fixed in 9.4-3ubuntu6.3 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-18477 | LOW2.24 | tar 1.35+dfsg-3ubuntu0.4 No fix yet | <0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-18508 | LOW2.24 | tar 1.35+dfsg-3ubuntu0.4 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-106586 | LOW2.19 | openssh-client 1:9.6p1-3ubuntu13.18 fixed in 1:9.6p1-3ubuntu13.20 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-102474 | LOW2.04 | dash 0.5.12-6ubuntu5 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-106582 | LOW1.89 | openssh-client 1:9.6p1-3ubuntu13.18 fixed in 1:9.6p1-3ubuntu13.20 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-35189 | LOW1.89 | openssl 3.0.13-0ubuntu3.12 fixed in 3.0.13-0ubuntu3.16 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-75803 | LOW1.89 | openssl 3.0.13-0ubuntu3.12 fixed in 3.0.13-0ubuntu3.15 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2024-56433 | LOW1.84 | login 1:4.13+dfsg1-4ubuntu3.2 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2024-56433 | LOW1.84 | passwd 1:4.13+dfsg1-4ubuntu3.2 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-73281 | LOW1.78 | openssh-client 1:9.6p1-3ubuntu13.18 fixed in 1:9.6p1-3ubuntu13.19 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2025-46394 | LOW1.68 | busybox 1:1.36.1-6ubuntu3.1 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-106584 | LOW1.68 | openssh-client 1:9.6p1-3ubuntu13.18 fixed in 1:9.6p1-3ubuntu13.20 | <0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-106587 | LOW1.68 | openssh-client 1:9.6p1-3ubuntu13.18 fixed in 1:9.6p1-3ubuntu13.20 | <0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-57062 | NONE0 | gpgv 2.4.4-2ubuntu17.4 fixed in 2.4.4-2ubuntu17.6 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2024-58251 | NONE0 | busybox 1:1.36.1-6ubuntu3.1 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-67693 | NONE0 | libgnutls30t64 3.8.3-1.1ubuntu3.6 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-88647 | NONE0 | libgnutls30t64 3.8.3-1.1ubuntu3.6 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-95184 | NONE0 | libgnutls30t64 3.8.3-1.1ubuntu3.6 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-95209 | NONE0 | libgnutls30t64 3.8.3-1.1ubuntu3.6 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-95210 | NONE0 | libgnutls30t64 3.8.3-1.1ubuntu3.6 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-7017 | NONE0 | libperl5.38t64 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.4 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-7017 | NONE0 | perl 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.4 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-7017 | NONE0 | perl-base 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.4 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-7017 | NONE0 | perl-modules-5.38 5.38.2-3.2ubuntu0.3 fixed in 5.38.2-3.2ubuntu0.4 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-85091 | NONE0 | zlib1g 1:1.3.dfsg-3.1ubuntu2.1 No fix yet | 0.4% Theoretical Threat | Not Applicable |
Which CVEs are actually reachable — is the vulnerable code even linked and callable.
Live-container probes: default user, writable paths, capabilities, exposed ports.
Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.
A step-by-step hardened build plan, with parity tests proving nothing breaks.
Want to check another image? Run a full scan with the Docker Security Scanner.