Vulnerability Reportgitlab/gitlab-ce:19.3.0-ce.0

gitlab/gitlab-ce:19.3.0-ce.0
digestsha256:f7e453ff51d1910235365085fe836e4589716d26b44d99a8aa3e2c41377f034f

Executive Summary

Last scanned:

Threat Score
30/100NEEDS ATTENTION
Reputation
RELIABLE

This image is acceptable for production, but remediating the identified vulnerabilities is recommended to reduce the attack surface. The exposed surface contains 93 findings, including four at severity 6.0 or higher, with a maximum exposed severity of 6.38 and no exposed findings at 7.0 or above. The most notable exposed issues are CVE-2026-9538 and CVE-2026-63074, both 6.38, which can cause denial of service through memory exhaustion in Perl Archive::Tar and OpenSSL CMP extraCerts handling. Post-exploit findings total 103 but have no severity at 6.0 or higher and a maximum of 3.98, so they are less urgent. CVE-2026-63074 only affects OpenSSL CMP servers that reuse a single OSSL_CMP_CTX; if that mode is not used, the practical risk is lower.

Vulnerabilities

Vulnerability Log

199 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-9538MEDIUM6.38
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-63074MEDIUM6.38
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-89157MEDIUM6.29
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-84782MEDIUM6.29
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-53612MEDIUM5.95
libblkid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53613MEDIUM5.95
libblkid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53614MEDIUM5.95
libblkid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53612MEDIUM5.95
libmount1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53613MEDIUM5.95
libmount1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53614MEDIUM5.95
libmount1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53612MEDIUM5.95
libsmartcols1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53613MEDIUM5.95
libsmartcols1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53614MEDIUM5.95
libsmartcols1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53612MEDIUM5.95
libuuid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53613MEDIUM5.95
libuuid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53614MEDIUM5.95
libuuid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2024-2236MEDIUM5.9
libgcrypt20
1.10.3-2ubuntu0.1
fixed in 1.10.3-2ubuntu0.2
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-19499MEDIUM5.78
libc-bin
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-19499MEDIUM5.78
libc6
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-89158MEDIUM5.52
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-89160MEDIUM5.52
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-15649MEDIUM5.52
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-19487MEDIUM5.52
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.6
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-106552MEDIUM5.52
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-106585MEDIUM5.52
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-106552MEDIUM5.52
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-106585MEDIUM5.52
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-54371MEDIUM5.35
libattr1
1:2.5.2-1build1.1
fixed in 1:2.5.2-1ubuntu0.1
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-13757MEDIUM5.27
libp11-kit0
0.25.3-4ubuntu2.1
fixed in 0.25.3-4ubuntu2.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-18938MEDIUM5.27
libp11-kit0
0.25.3-4ubuntu2.1
fixed in 0.25.3-4ubuntu2.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-106553MEDIUM5.1
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.1%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-106555MEDIUM5.1
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.1%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-106553MEDIUM5.1
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.1%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-106555MEDIUM5.1
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.1%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-6791MEDIUM5.02
libc-bin
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-77117MEDIUM5.02
libc-bin
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-80489MEDIUM5.02
libc-bin
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-6791MEDIUM5.02
libc6
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-77117MEDIUM5.02
libc6
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-80489MEDIUM5.02
libc6
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-89156MEDIUM5.02
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-54872MEDIUM5.02
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-75805MEDIUM5.02
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-77696MEDIUM5.02
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-15534MEDIUM4.84
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.6
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-73282MEDIUM4.76
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.19
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-73282MEDIUM4.76
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.19
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-6368MEDIUM4.67
libc-bin
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-6368MEDIUM4.67
libc6
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27171MEDIUM4.67
zlib1g
1:1.3.dfsg-3.1ubuntu2.1
fixed in 1:1.3.dfsg-3.1ubuntu2.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-73283MEDIUM4.59
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.19
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-73283MEDIUM4.59
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.19
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libblkid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libmount1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-12087MEDIUM4.5
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libsmartcols1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-75806MEDIUM4.5
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libuuid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-42250MEDIUM4.25
libbz2-1.0
1.0.8-5.1build0.1
fixed in 1.0.8-5.1ubuntu0.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-48959MEDIUM4.25
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-18374MEDIUM4.17
libc-bin
2.39-0ubuntu8.8
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-18374MEDIUM4.17
libc6
2.39-0ubuntu8.8
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libblkid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libmount1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libsmartcols1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libuuid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-106583LOW3.98
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-48962LOW3.98
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-48962LOW3.98
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-48962LOW3.98
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-106553LOW3.82
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-106555LOW3.82
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-63072LOW3.82
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
0.9%
Theoretical Threat
Post-Exploit
CVE-2026-54874LOW3.82
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-63074LOW3.82
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-57433LOW3.82
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-9538LOW3.82
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-57433LOW3.82
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-9538LOW3.82
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-57433LOW3.82
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-9538LOW3.82
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-84782LOW3.77
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.4%
Theoretical Threat
Post-Exploit
CVE-2021-31879LOW3.66
wget
1.21.4-1ubuntu4.4
No fix yet
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-106586LOW3.65
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-106586LOW3.65
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-53612LOW3.57
bsdutils
1:2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-53613LOW3.57
bsdutils
1:2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-53614LOW3.57
bsdutils
1:2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-53612LOW3.57
mount
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-53613LOW3.57
mount
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-53614LOW3.57
mount
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-53612LOW3.57
util-linux
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-53613LOW3.57
util-linux
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-53614LOW3.57
util-linux
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-19542LOW3.57
libc-bin
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-89092LOW3.57
libc-bin
2.39-0ubuntu8.8
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-19542LOW3.57
libc6
2.39-0ubuntu8.8
fixed in 2.39-0ubuntu8.9
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-89092LOW3.57
libc6
2.39-0ubuntu8.8
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-106552LOW3.31
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-106585LOW3.31
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-15649LOW3.31
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-19487LOW3.31
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.6
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-15649LOW3.31
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-19487LOW3.31
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.6
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-15649LOW3.31
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-19487LOW3.31
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.6
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-35189LOW3.15
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-75803LOW3.15
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-106582LOW3.15
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-106582LOW3.15
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-54872LOW3.01
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-75805LOW3.01
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-77696LOW3.01
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-73281LOW2.98
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.19
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-73281LOW2.98
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.19
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-15534LOW2.91
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.6
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-15534LOW2.91
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.6
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-15534LOW2.91
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.6
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-73282LOW2.86
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.19
0.2%
Theoretical Threat
Post-Exploit
CVE-2023-42366LOW2.8
busybox
1:1.36.1-6ubuntu3.1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-102473LOW2.8
dash
0.5.12-6ubuntu5
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-6141LOW2.8
libncursesw6
6.4+20240113-1ubuntu2.1
fixed in 6.4+20240113-1ubuntu2.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-40228LOW2.8
libsystemd0
255.4-1ubuntu8.17
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-6141LOW2.8
libtinfo6
6.4+20240113-1ubuntu2.1
fixed in 6.4+20240113-1ubuntu2.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-40228LOW2.8
libudev1
255.4-1ubuntu8.17
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-106584LOW2.8
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-106587LOW2.8
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-106584LOW2.8
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-106587LOW2.8
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-13221LOW2.78
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13221LOW2.78
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13221LOW2.78
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13221LOW2.78
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-60876LOW2.75
busybox
1:1.36.1-6ubuntu3.1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-73283LOW2.75
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.19
<0.1%
Theoretical Threat
Post-Exploit
CVE-2026-63076LOW2.7
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
1.6%
Low-Moderate Risk
Post-Exploit
CVE-2026-63076LOW2.7
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
1.6%
Low-Moderate Risk
Post-Exploit
CVE-2026-13595LOW2.7
bsdutils
1:2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53910LOW2.7
diffutils
1:3.10-1build1
fixed in 1:3.10-1ubuntu0.1
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-13595LOW2.7
mount
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-75806LOW2.7
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-12087LOW2.7
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-12087LOW2.7
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-12087LOW2.7
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13595LOW2.7
util-linux
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-57432LOW2.57
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-57432LOW2.57
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-57432LOW2.57
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-57432LOW2.57
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-48959LOW2.55
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-48959LOW2.55
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-48959LOW2.55
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-86145LOW2.51
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-53615LOW2.45
bsdutils
1:2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53615LOW2.45
libblkid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53615LOW2.45
libmount1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53615LOW2.45
libsmartcols1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53615LOW2.45
libuuid1
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53615LOW2.45
mount
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-53615LOW2.45
util-linux
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
bsdutils
1:2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
mount
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
util-linux
2.39.3-9ubuntu6.5
fixed in 2.39.3-9ubuntu6.6
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-89161LOW2.39
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-48962LOW2.39
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-106583LOW2.39
openssh-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-106583LOW2.39
openssh-sftp-server
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-103111LOW2.33
libpcre2-8-0
10.42-4ubuntu2.1
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-57433LOW2.29
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-63072LOW2.29
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
0.9%
Theoretical Threat
Post-Exploit
CVE-2026-54874LOW2.29
libssl3t64
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
0.6%
Theoretical Threat
Post-Exploit
CVE-2025-5278LOW2.24
coreutils
9.4-3ubuntu6.2
fixed in 9.4-3ubuntu6.3
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-18477LOW2.24
tar
1.35+dfsg-3ubuntu0.4
No fix yet
<0.1%
Theoretical Threat
Post-Exploit
CVE-2026-18508LOW2.24
tar
1.35+dfsg-3ubuntu0.4
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-106586LOW2.19
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-102474LOW2.04
dash
0.5.12-6ubuntu5
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-106582LOW1.89
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-35189LOW1.89
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.16
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-75803LOW1.89
openssl
3.0.13-0ubuntu3.12
fixed in 3.0.13-0ubuntu3.15
0.2%
Theoretical Threat
Post-Exploit
CVE-2024-56433LOW1.84
login
1:4.13+dfsg1-4ubuntu3.2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2024-56433LOW1.84
passwd
1:4.13+dfsg1-4ubuntu3.2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-73281LOW1.78
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.19
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-46394LOW1.68
busybox
1:1.36.1-6ubuntu3.1
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-106584LOW1.68
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
<0.1%
Theoretical Threat
Post-Exploit
CVE-2026-106587LOW1.68
openssh-client
1:9.6p1-3ubuntu13.18
fixed in 1:9.6p1-3ubuntu13.20
<0.1%
Theoretical Threat
Post-Exploit
CVE-2025-6141NONE0
ncurses-base
6.4+20240113-1ubuntu2.1
fixed in 6.4+20240113-1ubuntu2.2
0.2%
Theoretical Threat
Not Applicable
CVE-2025-6141NONE0
ncurses-bin
6.4+20240113-1ubuntu2.1
fixed in 6.4+20240113-1ubuntu2.2
0.2%
Theoretical Threat
Not Applicable
CVE-2026-57062NONE0
gpgv
2.4.4-2ubuntu17.4
fixed in 2.4.4-2ubuntu17.6
0.1%
Theoretical Threat
Not Applicable
CVE-2024-58251NONE0
busybox
1:1.36.1-6ubuntu3.1
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-67693NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.6
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-88647NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.6
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-95184NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.6
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-95209NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.6
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-95210NONE0
libgnutls30t64
3.8.3-1.1ubuntu3.6
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-7017NONE0
libperl5.38t64
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.2%
Theoretical Threat
Not Applicable
CVE-2026-7017NONE0
perl
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.2%
Theoretical Threat
Not Applicable
CVE-2026-7017NONE0
perl-base
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.2%
Theoretical Threat
Not Applicable
CVE-2026-7017NONE0
perl-modules-5.38
5.38.2-3.2ubuntu0.3
fixed in 5.38.2-3.2ubuntu0.4
0.2%
Theoretical Threat
Not Applicable
CVE-2026-85091NONE0
zlib1g
1:1.3.dfsg-3.1ubuntu2.1
No fix yet
0.4%
Theoretical Threat
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Supply chain analysis

Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.