Last scanned:
This image is acceptable for production, but remediating the identified vulnerabilities is recommended to reduce the attack surface. The 113 exposed findings are real but mostly denial-of-service issues that depend on special configuration, such as a gRPC listener reachable by untrusted clients (GHSA-hrxh-6v49-42gf) or TLS connections to a hostile Loki endpoint (CVE-2026-27145). In the worst case, an attacker controlling a malicious endpoint could slow log shipping or exhaust CPU, but the listed findings do not provide code execution or data access. Because the container runs as root by default, updating the Go toolchain and gRPC package is a sensible hardening step.
| CVE ID | Adjusted Severity | Package | Exploit Probability | Risk Context |
|---|---|---|---|---|
| GHSA-hrxh-6v49-42gf | HIGH7.04 | google.golang.org/grpc v1.79.3 fixed in 1.82.1 | — | Directly ExposedContext importance: MEDIUM |
| CVE-2026-94448 | MEDIUM6.1 | stdlib v1.25.8 fixed in 1.26.9, 1.27.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-97030 | MEDIUM6.1 | stdlib v1.25.8 fixed in 1.26.9, 1.27.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-84304 | MEDIUM6 | google.golang.org/grpc v1.79.3 fixed in 1.83.1 | 0.6% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-84445 | MEDIUM6 | google.golang.org/grpc v1.79.3 fixed in 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | 0.6% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-27145 | MEDIUM6 | stdlib v1.25.8 fixed in 1.25.11, 1.26.4 | 0.6% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-32280 | MEDIUM6 | stdlib v1.25.8 fixed in 1.25.9, 1.26.2 | 0.6% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-32283 | MEDIUM6 | stdlib v1.25.8 fixed in 1.25.9, 1.26.2 | 0.6% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-33814 | MEDIUM6 | stdlib v1.25.8 fixed in 1.25.10, 1.26.3 | 0.8% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-33818 | MEDIUM6 | stdlib v1.25.8 fixed in 1.25.13, 1.26.6, 1.27.0-rc.3 | 0.6% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-56862 | MEDIUM6 | stdlib v1.25.8 fixed in 1.25.13, 1.26.6, 1.27.0-rc.3 | 0.6% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-78669 | MEDIUM6 | stdlib v1.25.8 fixed in 1.26.9, 1.27.2 | 0.6% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-78659 | MEDIUM6 | stdlib v1.25.8 fixed in 1.26.9, 1.27.2 | 0.6% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-5435 | MEDIUM5.9 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-6791 | MEDIUM5.9 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-77117 | MEDIUM5.9 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-80489 | MEDIUM5.9 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-5435 | MEDIUM5.9 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-6791 | MEDIUM5.9 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-77117 | MEDIUM5.9 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-80489 | MEDIUM5.9 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-31790 | MEDIUM5.9 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.9 | 1.0% Low-Moderate Risk | Directly Exposed |
| CVE-2026-97032 | MEDIUM5.9 | stdlib v1.25.8 fixed in 1.26.9, 1.27.2 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-6368 | MEDIUM5.5 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-6368 | MEDIUM5.5 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-15059 | MEDIUM5.5 | libsystemd-dev 255.4-1ubuntu8.14 fixed in 255.4-1ubuntu8.17 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-15059 | MEDIUM5.5 | libsystemd0 255.4-1ubuntu8.14 fixed in 255.4-1ubuntu8.17 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-15059 | MEDIUM5.5 | libudev1 255.4-1ubuntu8.14 fixed in 255.4-1ubuntu8.17 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-32288 | MEDIUM5.5 | stdlib v1.25.8 fixed in 1.25.9, 1.26.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-111943 | MEDIUM5.44 | stdlib v1.25.8 fixed in 1.26.10, 1.27.3 | 0.3% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-39823 | MEDIUM5.4 | stdlib v1.25.8 fixed in 1.25.10, 1.26.3 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-39826 | MEDIUM5.4 | stdlib v1.25.8 fixed in 1.25.10, 1.26.3 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-4046 | MEDIUM5.3 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-4046 | MEDIUM5.3 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-21726 | MEDIUM5.3 | github.com/grafana/loki/v3 v3.0.0-20260325130223-138c391fd023 fixed in 3.6.4 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-39882 | MEDIUM5.3 | go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.12.2 fixed in 0.19.0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-39882 | MEDIUM5.3 | go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.36.0 fixed in 1.43.0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-39882 | MEDIUM5.3 | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.36.0 fixed in 1.43.0 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-81872 | MEDIUM5.3 | go.opentelemetry.io/otel/sdk/log v0.12.2 fixed in 0.21.0 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-42505 | MEDIUM5.3 | stdlib v1.25.8 fixed in 1.25.12, 1.26.5, 1.27.0-rc.2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-42507 | MEDIUM5.3 | stdlib v1.25.8 fixed in 1.25.11, 1.26.4 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-78663 | MEDIUM5.3 | stdlib v1.25.8 fixed in 1.26.9, 1.27.2 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-84303 | MEDIUM5.04 | google.golang.org/grpc v1.79.3 fixed in 1.83.1 | 0.3% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-5450 | MEDIUM5 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-5928 | MEDIUM5 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-5450 | MEDIUM5 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-5928 | MEDIUM5 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-85091 | MEDIUM5 | zlib1g 1:1.3.dfsg-3.1ubuntu2.1 fixed in 1:1.3.dfsg-3.1ubuntu2.3 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-18374 | MEDIUM4.9 | libc-bin 2.39-0ubuntu8.7 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-18374 | MEDIUM4.9 | libc6 2.39-0ubuntu8.7 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-39822 | MEDIUM4.68 | stdlib v1.25.8 fixed in 1.25.12, 1.26.5, 1.27.0-rc.2 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-29181 | MEDIUM4.5 | go.opentelemetry.io/otel v1.40.0 fixed in 1.41.0 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-33811 | MEDIUM4.5 | stdlib v1.25.8 fixed in 1.25.10, 1.26.3 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2026-39836 | MEDIUM4.5 | stdlib v1.25.8 fixed in 1.25.10, 1.26.3 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-56853 | MEDIUM4.5 | stdlib v1.25.8 fixed in 1.25.13, 1.26.6, 1.27.0-rc.3 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-78667 | MEDIUM4.5 | stdlib v1.25.8 fixed in 1.26.9, 1.27.2 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-97031 | MEDIUM4.5 | stdlib v1.25.8 fixed in 1.26.9, 1.27.2 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-78660 | MEDIUM4.5 | stdlib v1.25.8 fixed in 1.26.9, 1.27.2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-94440 | MEDIUM4.5 | stdlib v1.25.8 fixed in 1.26.9, 1.27.2 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-19542 | MEDIUM4.2 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-89092 | MEDIUM4.2 | libc-bin 2.39-0ubuntu8.7 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-19542 | MEDIUM4.2 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-89092 | MEDIUM4.2 | libc6 2.39-0ubuntu8.7 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-63072 | MEDIUM4.14 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.15 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2026-63076 | MEDIUM4.14 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.15 | 1.6% Low-Moderate Risk | Directly Exposed |
| CVE-2026-4438 | MEDIUM4 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-4438 | MEDIUM4 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-39824 | MEDIUM4 | golang.org/x/sys v0.40.0 fixed in 0.44.0 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-4437 | LOW3.9 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-6238 | LOW3.9 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-4437 | LOW3.9 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-6238 | LOW3.9 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-39825 | LOW3.9 | stdlib v1.25.8 fixed in 1.25.10, 1.26.3 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-56866 | LOW3.9 | stdlib v1.25.8 fixed in 1.26.9, 1.27.2 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-94439 | LOW3.9 | stdlib v1.25.8 fixed in 1.26.9, 1.27.2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-42250 | LOW3.9 | libbz2-1.0 1.0.8-5.1build0.1 fixed in 1.0.8-5.1ubuntu0.1 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-34743 | LOW3.9 | liblzma5 5.6.1+really5.4.5-1ubuntu0.2 fixed in 5.6.1+really5.4.5-1ubuntu0.3 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-28387 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.9 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-28388 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.9 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2026-28389 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.9 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-28390 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.9 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-31789 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.9 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-34180 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 1.0% Low-Moderate Risk | Directly Exposed |
| CVE-2026-42766 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-42767 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-42770 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-54872 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.16 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-54874 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.15 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-63074 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.15 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-7383 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-75805 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.16 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-75806 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.16 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-77696 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.16 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-9076 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-27171 | LOW3.9 | zlib1g 1:1.3.dfsg-3.1ubuntu2.1 fixed in 1:1.3.dfsg-3.1ubuntu2.2 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-40226 | LOW3.84 | libsystemd-dev 255.4-1ubuntu8.14 fixed in 255.4-1ubuntu8.16 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-40226 | LOW3.84 | libsystemd0 255.4-1ubuntu8.14 fixed in 255.4-1ubuntu8.16 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-40226 | LOW3.84 | libudev1 255.4-1ubuntu8.14 fixed in 255.4-1ubuntu8.16 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-32282 | LOW3.84 | stdlib v1.25.8 fixed in 1.25.9, 1.26.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-54371 | LOW3.78 | libattr1 1:2.5.2-1build1.1 fixed in 1:2.5.2-1ubuntu0.1 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-5958 | LOW3.78 | sed 4.9-2build1 fixed in 4.9-2ubuntu0.24.04.1 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-13757 | LOW3.72 | libp11-kit0 0.25.3-4ubuntu2.1 fixed in 0.25.3-4ubuntu2.2 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-18938 | LOW3.72 | libp11-kit0 0.25.3-4ubuntu2.1 fixed in 0.25.3-4ubuntu2.2 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-35189 | LOW3.7 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.16 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-45446 | LOW3.7 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-75803 | LOW3.7 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.15 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-32289 | LOW3.66 | stdlib v1.25.8 fixed in 1.25.9, 1.26.2 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-31790 | LOW3.54 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.9 | 1.0% Low-Moderate Risk | Post-Exploit |
| CVE-2026-102473 | LOW3.3 | dash 0.5.12-6ubuntu5 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-5704 | LOW3.3 | tar 1.35+dfsg-3build1 fixed in 1.35+dfsg-3ubuntu0.4 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-40228 | LOW3.3 | libsystemd-dev 255.4-1ubuntu8.14 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-40228 | LOW3.3 | libsystemd0 255.4-1ubuntu8.14 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-40228 | LOW3.3 | libudev1 255.4-1ubuntu8.14 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-81870 | LOW3.3 | go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.36.0 fixed in 1.45.0 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-81870 | LOW3.3 | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.36.0 fixed in 1.45.0 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-81870 | LOW3.3 | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.36.0 fixed in 1.45.0 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-56857 | LOW3.3 | stdlib v1.25.8 fixed in 1.26.9, 1.27.2 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-53910 | LOW3.18 | diffutils 1:3.10-1build1 fixed in 1:3.10-1ubuntu0.1 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-39828 | LOW3.17 | golang.org/x/crypto v0.46.0 fixed in 0.52.0 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-39832 | LOW3.13 | golang.org/x/crypto v0.46.0 fixed in 0.52.0 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2026-2219 | LOW3 | dpkg 1.22.6ubuntu6.5 fixed in 1.22.6ubuntu6.6 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-39821 | LOW2.95 | golang.org/x/net v0.48.0 fixed in 0.55.0 | 1.8% Low-Moderate Risk | Post-Exploit |
| CVE-2026-39821 | LOW2.95 | stdlib v1.25.8 fixed in 1.25.13, 1.26.6, 1.27.0-rc.3 | 1.8% Low-Moderate Risk | Post-Exploit |
| CVE-2026-45447 | LOW2.92 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 4.0% Low-Moderate Risk | Post-Exploit |
| CVE-2026-45447 | LOW2.92 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 4.0% Low-Moderate Risk | Post-Exploit |
| CVE-2026-33997 | LOW2.92 | github.com/docker/docker v28.5.0+incompatible fixed in 29.3.1 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-39831 | LOW2.92 | golang.org/x/crypto v0.46.0 fixed in 0.52.0 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-25681 | LOW2.92 | golang.org/x/net v0.48.0 fixed in 0.55.0 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-27136 | LOW2.92 | golang.org/x/net v0.48.0 fixed in 0.55.0 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-56858 | LOW2.92 | stdlib v1.25.8 fixed in 1.25.13, 1.26.6, 1.27.0-rc.3 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-54411 | LOW2.88 | libpam-modules 1.5.3-5ubuntu5.5 fixed in 1.5.3-5ubuntu5.6 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-54411 | LOW2.88 | libpam-modules-bin 1.5.3-5ubuntu5.5 fixed in 1.5.3-5ubuntu5.6 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-54411 | LOW2.88 | libpam-runtime 1.5.3-5ubuntu5.5 fixed in 1.5.3-5ubuntu5.6 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-54411 | LOW2.88 | libpam0g 1.5.3-5ubuntu5.5 fixed in 1.5.3-5ubuntu5.6 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2025-45582 | LOW2.86 | tar 1.35+dfsg-3build1 fixed in 1.35+dfsg-3ubuntu0.2 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-63209 | LOW2.7 | github.com/klauspost/compress v1.18.0 fixed in 1.18.7 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-42151 | LOW2.7 | github.com/prometheus/prometheus v0.305.1-0.20250806170547-208187eaa19b fixed in 0.311.3 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-42154 | LOW2.7 | github.com/prometheus/prometheus v0.305.1-0.20250806170547-208187eaa19b fixed in 0.311.3, 0.305.2 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2026-39829 | LOW2.7 | golang.org/x/crypto v0.46.0 fixed in 0.52.0 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-39830 | LOW2.7 | golang.org/x/crypto v0.46.0 fixed in 0.52.0 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2026-39835 | LOW2.7 | golang.org/x/crypto v0.46.0 fixed in 0.52.0 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-46597 | LOW2.7 | golang.org/x/crypto v0.46.0 fixed in 0.52.0 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-33814 | LOW2.7 | golang.org/x/net v0.48.0 fixed in 0.53.0 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2026-46600 | LOW2.7 | golang.org/x/net v0.48.0 fixed in 0.56.0 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-78669 | LOW2.7 | golang.org/x/net v0.48.0 fixed in 0.60.0 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-78659 | LOW2.7 | golang.org/x/net v0.48.0 fixed in 0.60.0 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-78660 | LOW2.7 | golang.org/x/net v0.48.0 fixed in 0.60.0 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-56851 | LOW2.7 | golang.org/x/text v0.32.0 fixed in 0.41.0 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-56852 | LOW2.7 | golang.org/x/text v0.32.0 fixed in 0.39.0 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-32281 | LOW2.7 | stdlib v1.25.8 fixed in 1.25.9, 1.26.2 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-39820 | LOW2.7 | stdlib v1.25.8 fixed in 1.25.10, 1.26.3 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2026-42499 | LOW2.7 | stdlib v1.25.8 fixed in 1.25.10, 1.26.3 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2026-42504 | LOW2.7 | stdlib v1.25.8 fixed in 1.25.11, 1.26.4 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-56859 | LOW2.7 | stdlib v1.25.8 fixed in 1.25.13, 1.26.6, 1.27.0-rc.3 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-56860 | LOW2.7 | stdlib v1.25.8 fixed in 1.25.13, 1.26.6, 1.27.0-rc.3 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-84782 | LOW2.66 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.16 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2026-84782 | LOW2.66 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.16 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2026-42508 | LOW2.66 | golang.org/x/crypto v0.46.0 fixed in 0.52.0 | 6.9% Low-Moderate Risk | Post-Exploit |
| CVE-2026-18477 | LOW2.64 | tar 1.35+dfsg-3build1 No fix yet | <0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-18508 | LOW2.64 | tar 1.35+dfsg-3build1 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-41567 | LOW2.59 | github.com/docker/docker v28.5.0+incompatible No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-42306 | LOW2.59 | github.com/docker/docker v28.5.0+incompatible No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-46595 | LOW2.56 | golang.org/x/crypto v0.46.0 fixed in 0.52.0 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-39883 | LOW2.52 | go.opentelemetry.io/otel/sdk v1.40.0 fixed in 1.43.0 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-53612 | LOW2.48 | bsdutils 1:2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53613 | LOW2.48 | bsdutils 1:2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53614 | LOW2.48 | bsdutils 1:2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-53615 | LOW2.48 | bsdutils 1:2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-41992 | LOW2.48 | gzip 1.12-1ubuntu3.1 fixed in 1.12-1ubuntu3.2 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-53612 | LOW2.48 | libblkid1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53613 | LOW2.48 | libblkid1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53614 | LOW2.48 | libblkid1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-53615 | LOW2.48 | libblkid1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-4878 | LOW2.48 | libcap2 1:2.66-5ubuntu2.2 fixed in 1:2.66-5ubuntu2.4 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-41989 | LOW2.48 | libgcrypt20 1.10.3-2build1 fixed in 1.10.3-2ubuntu0.1 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-33845 | LOW2.48 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 2.1% Low-Moderate Risk | Post-Exploit |
| CVE-2026-33846 | LOW2.48 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 1.3% Low-Moderate Risk | Post-Exploit |
| CVE-2026-3833 | LOW2.48 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-42009 | LOW2.48 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 1.3% Low-Moderate Risk | Post-Exploit |
| CVE-2026-42010 | LOW2.48 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 1.1% Low-Moderate Risk | Post-Exploit |
| CVE-2026-42011 | LOW2.48 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-42012 | LOW2.48 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-42013 | LOW2.48 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-5260 | LOW2.48 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2026-88647 | LOW2.48 | libgnutls30t64 3.8.3-1.1ubuntu3.5 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-88648 | LOW2.48 | libgnutls30t64 3.8.3-1.1ubuntu3.5 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53612 | LOW2.48 | libmount1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53613 | LOW2.48 | libmount1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53614 | LOW2.48 | libmount1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-53615 | LOW2.48 | libmount1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-103111 | LOW2.48 | libpcre2-8-0 10.42-4ubuntu2.1 No fix yet | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-86145 | LOW2.48 | libpcre2-8-0 10.42-4ubuntu2.1 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-89157 | LOW2.48 | libpcre2-8-0 10.42-4ubuntu2.1 No fix yet | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-89161 | LOW2.48 | libpcre2-8-0 10.42-4ubuntu2.1 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-53612 | LOW2.48 | libsmartcols1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53613 | LOW2.48 | libsmartcols1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53614 | LOW2.48 | libsmartcols1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-53615 | LOW2.48 | libsmartcols1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-34182 | LOW2.48 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 1.1% Low-Moderate Risk | Post-Exploit |
| CVE-2026-45445 | LOW2.48 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2026-16742 | LOW2.48 | libsystemd-dev 255.4-1ubuntu8.14 fixed in 255.4-1ubuntu8.17 | <0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-16742 | LOW2.48 | libsystemd0 255.4-1ubuntu8.14 fixed in 255.4-1ubuntu8.17 | <0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-16742 | LOW2.48 | libudev1 255.4-1ubuntu8.14 fixed in 255.4-1ubuntu8.17 | <0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-53612 | LOW2.48 | libuuid1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53613 | LOW2.48 | libuuid1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53614 | LOW2.48 | libuuid1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-53615 | LOW2.48 | libuuid1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53612 | LOW2.48 | mount 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53613 | LOW2.48 | mount 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53614 | LOW2.48 | mount 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-53615 | LOW2.48 | mount 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-34182 | LOW2.48 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 1.1% Low-Moderate Risk | Post-Exploit |
| CVE-2026-45445 | LOW2.48 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2026-63072 | LOW2.48 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.15 | 0.9% Theoretical Threat | Post-Exploit |
| CVE-2026-63076 | LOW2.48 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.15 | 1.6% Low-Moderate Risk | Post-Exploit |
| CVE-2026-13221 | LOW2.48 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.4 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-42496 | LOW2.48 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.3 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-42497 | LOW2.48 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.3 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-48962 | LOW2.48 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.4 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-57432 | LOW2.48 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.4 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-57433 | LOW2.48 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.4 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-8376 | LOW2.48 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.3 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-9538 | LOW2.48 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.4 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-53612 | LOW2.48 | util-linux 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53613 | LOW2.48 | util-linux 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53614 | LOW2.48 | util-linux 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-53615 | LOW2.48 | util-linux 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-19499 | LOW2.45 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-19499 | LOW2.45 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-56854 | LOW2.45 | golang.org/x/crypto v0.46.0 fixed in 0.55.0 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-102474 | LOW2.4 | dash 0.5.12-6ubuntu5 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-42014 | LOW2.38 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-89158 | LOW2.34 | libpcre2-8-0 10.42-4ubuntu2.1 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-89160 | LOW2.34 | libpcre2-8-0 10.42-4ubuntu2.1 No fix yet | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2025-15649 | LOW2.34 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.4 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-19487 | LOW2.34 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.6 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-2303 | LOW2.34 | go.mongodb.org/mongo-driver v1.17.2 fixed in 1.17.7 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-81871 | LOW2.34 | go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.12.2 fixed in 0.21.0 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-39827 | LOW2.34 | golang.org/x/crypto v0.46.0 fixed in 0.52.0 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-39834 | LOW2.34 | golang.org/x/crypto v0.46.0 fixed in 0.52.0 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-25680 | LOW2.34 | golang.org/x/net v0.48.0 fixed in 0.55.0 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2025-69720 | LOW2.34 | libncursesw6 6.4+20240113-1ubuntu2 fixed in 6.4+20240113-1ubuntu2.1 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2025-69720 | LOW2.34 | libtinfo6 6.4+20240113-1ubuntu2 fixed in 6.4+20240113-1ubuntu2.1 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2025-69720 | LOW2.34 | ncurses-base 6.4+20240113-1ubuntu2 fixed in 6.4+20240113-1ubuntu2.1 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2025-69720 | LOW2.34 | ncurses-bin 6.4+20240113-1ubuntu2 fixed in 6.4+20240113-1ubuntu2.1 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-28387 | LOW2.34 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.9 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2026-28388 | LOW2.34 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.9 | 0.9% Theoretical Threat | Post-Exploit |
| CVE-2026-28389 | LOW2.34 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.9 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2026-28390 | LOW2.34 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.9 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2026-31789 | LOW2.34 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.9 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-34180 | LOW2.34 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 1.0% Low-Moderate Risk | Post-Exploit |
| CVE-2026-42766 | LOW2.34 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 1.1% Low-Moderate Risk | Post-Exploit |
| CVE-2026-42767 | LOW2.34 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-42770 | LOW2.34 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-54872 | LOW2.34 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.16 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-54874 | LOW2.34 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.15 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-63074 | LOW2.34 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.15 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-7383 | LOW2.34 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2026-75805 | LOW2.34 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.16 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-75806 | LOW2.34 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.16 | 1.1% Low-Moderate Risk | Post-Exploit |
| CVE-2026-77696 | LOW2.34 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.16 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-9076 | LOW2.34 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2026-35189 | LOW2.22 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.16 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-45446 | LOW2.22 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-75803 | LOW2.22 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.15 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-40179 | LOW2.2 | github.com/prometheus/prometheus v0.305.1-0.20250806170547-208187eaa19b fixed in 3.5.2, 3.11.2, 0.311.2-0.20260410083055-07c6232d159b | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-44903 | LOW2.2 | github.com/prometheus/prometheus v0.305.1-0.20250806170547-208187eaa19b fixed in 0.311.3 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-42502 | LOW2.2 | golang.org/x/net v0.48.0 fixed in 0.55.0 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-41568 | LOW2.16 | github.com/docker/docker v28.5.0+incompatible No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-67693 | LOW2.12 | libgnutls30t64 3.8.3-1.1ubuntu3.5 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-89156 | LOW2.12 | libpcre2-8-0 10.42-4ubuntu2.1 No fix yet | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-97032 | LOW2.12 | golang.org/x/net v0.48.0 fixed in 0.60.0 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-15534 | LOW2.05 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2025-5278 | LOW1.99 | coreutils 9.4-3ubuntu6.1 fixed in 9.4-3ubuntu6.3 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-39833 | LOW1.98 | golang.org/x/crypto v0.46.0 fixed in 0.52.0 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-42506 | LOW1.94 | golang.org/x/net v0.48.0 fixed in 0.55.0 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-13595 | LOW1.91 | bsdutils 1:2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-13595 | LOW1.91 | libblkid1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-42015 | LOW1.91 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2026-95184 | LOW1.91 | libgnutls30t64 3.8.3-1.1ubuntu3.5 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-13595 | LOW1.91 | libmount1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-13595 | LOW1.91 | libsmartcols1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-13595 | LOW1.91 | libuuid1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-13595 | LOW1.91 | mount 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-12087 | LOW1.91 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.4 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-13595 | LOW1.91 | util-linux 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-46598 | LOW1.91 | golang.org/x/crypto v0.46.0 fixed in 0.52.0 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-56855 | LOW1.91 | golang.org/x/crypto v0.46.0 fixed in 0.56.0 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-78662 | LOW1.91 | golang.org/x/crypto v0.46.0 fixed in 0.56.0 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-78663 | LOW1.91 | golang.org/x/net v0.48.0 fixed in 0.60.0 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2024-56433 | LOW1.84 | login 1:4.13+dfsg1-4ubuntu3.2 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2024-56433 | LOW1.84 | passwd 1:4.13+dfsg1-4ubuntu3.2 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-95209 | LOW1.8 | libgnutls30t64 3.8.3-1.1ubuntu3.5 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-95210 | LOW1.8 | libgnutls30t64 3.8.3-1.1ubuntu3.5 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-48959 | LOW1.8 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.4 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-7017 | LOW1.8 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.4 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-57062 | LOW1.74 | gpgv 2.4.4-2ubuntu17.4 fixed in 2.4.4-2ubuntu17.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-27456 | LOW1.69 | bsdutils 1:2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-41991 | LOW1.69 | gzip 1.12-1ubuntu3.1 fixed in 1.12-1ubuntu3.2 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-27456 | LOW1.69 | libblkid1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-27456 | LOW1.69 | libmount1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-27456 | LOW1.69 | libsmartcols1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-27456 | LOW1.69 | libuuid1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-27456 | LOW1.69 | mount 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-27456 | LOW1.69 | util-linux 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2025-6141 | LOW1.68 | libncursesw6 6.4+20240113-1ubuntu2 fixed in 6.4+20240113-1ubuntu2.2 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2025-6141 | LOW1.68 | libtinfo6 6.4+20240113-1ubuntu2 fixed in 6.4+20240113-1ubuntu2.2 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2025-6141 | LOW1.68 | ncurses-base 6.4+20240113-1ubuntu2 fixed in 6.4+20240113-1ubuntu2.2 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2025-6141 | LOW1.68 | ncurses-bin 6.4+20240113-1ubuntu2 fixed in 6.4+20240113-1ubuntu2.2 | 0.2% Theoretical Threat | Post-Exploit |
| GO-2026-5932 | LOW1.44 | golang.org/x/crypto v0.46.0 No fix yet | — | Post-Exploit |
| CVE-2024-2236 | LOW1.4 | libgcrypt20 1.10.3-2build1 fixed in 1.10.3-2ubuntu0.2 | 1.1% Low-Moderate Risk | Post-Exploit |
| CVE-2026-3832 | LOW1.33 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2026-5419 | LOW1.33 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-81870 | LOW1.19 | go.opentelemetry.io/otel/sdk v1.40.0 fixed in 1.45.0 | 0.3% Theoretical Threat | Post-Exploit |
Which CVEs are actually reachable — is the vulnerable code even linked and callable.
Live-container probes: default user, writable paths, capabilities, exposed ports.
Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.
A step-by-step hardened build plan, with parity tests proving nothing breaks.
Want to check another image? Run a full scan with the Docker Security Scanner.