Vulnerability Reportinfluxdb:3.1.0-enterprise

influxdb:3.1.0-enterprise
digestsha256:a1944483af83406ee1b2ebdb66f20a704c311571dedc92aeacd46de46895dae2

Executive Summary

Last scanned:

Threat Score
50/100CAUTION
Reputation
TRUSTED

This image carries significant risk; production deployment is highly discouraged without strict compensating controls. The image contains 103 exposed vulnerabilities, 22 rated moderate severity (>=6.0), including CVE-2026-0861 (glibc heap corruption) and CVE-2026-28387 (OpenSSL use-after-free), which could potentially lead to arbitrary code execution or denial of service. However, these require uncommon conditions: CVE-2026-0861 needs attacker-controlled alignment arguments, and CVE-2026-28387 only affects clients using specific DANE TLSA configurations. The 120 post-exploitation findings are all low severity (max 4.13), limiting post-breach impact. Since all exposed severities remain below 7.0, this is not a critical breakage, but proactive patching is strongly advised.

Vulnerabilities

Vulnerability Log

241 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-0861MEDIUM6.88
libc-bin
2.39-0ubuntu8.4
fixed in 2.39-0ubuntu8.7
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-0861MEDIUM6.88
libc6
2.39-0ubuntu8.4
fixed in 2.39-0ubuntu8.7
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-28387MEDIUM6.88
libssl3t64
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.9
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-29111MEDIUM6.63
libsystemd0
255.4-1ubuntu8.6
fixed in 255.4-1ubuntu8.14
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-29111MEDIUM6.63
libudev1
255.4-1ubuntu8.6
fixed in 255.4-1ubuntu8.14
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-41989MEDIUM6.38
libgcrypt20
1.10.3-2build1
fixed in 1.10.3-2ubuntu0.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-40355MEDIUM6.38
libgssapi-krb5-2
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40356MEDIUM6.38
libgssapi-krb5-2
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40355MEDIUM6.38
libk5crypto3
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40356MEDIUM6.38
libk5crypto3
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40355MEDIUM6.38
libkrb5-3
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40356MEDIUM6.38
libkrb5-3
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40355MEDIUM6.38
libkrb5support0
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40356MEDIUM6.38
libkrb5support0
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-27135MEDIUM6.38
libnghttp2-14
1.59.0-1ubuntu0.2
fixed in 1.59.0-1ubuntu0.3
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-3731MEDIUM6.38
libssh-4
0.10.6-2build2
fixed in 0.10.6-2ubuntu0.4
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-69421MEDIUM6.38
libssl3t64
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.7
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-3833MEDIUM6.29
libgnutls30t64
3.8.3-1.1ubuntu3.3
fixed in 3.8.3-1.1ubuntu3.6
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42011MEDIUM6.29
libgnutls30t64
3.8.3-1.1ubuntu3.3
fixed in 3.8.3-1.1ubuntu3.6
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-34182MEDIUM6.29
libssl3t64
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.11
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-69419MEDIUM6.29
libssl3t64
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.7
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42012MEDIUM6.03
libgnutls30t64
3.8.3-1.1ubuntu3.3
fixed in 3.8.3-1.1ubuntu3.6
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-4878MEDIUM5.95
libcap2
1:2.66-5ubuntu2.2
fixed in 1:2.66-5ubuntu2.4
0.2%
Theoretical Threat
Directly Exposed
CVE-2024-2236MEDIUM5.9
libgcrypt20
1.10.3-2build1
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-31790MEDIUM5.9
libssl3t64
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.9
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2025-13151MEDIUM5.9
libtasn1-6
4.19.0-3ubuntu0.24.04.1
fixed in 4.19.0-3ubuntu0.24.04.2
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-42014MEDIUM5.61
libgnutls30t64
3.8.3-1.1ubuntu3.3
fixed in 3.8.3-1.1ubuntu3.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-9230MEDIUM5.6
libssl3t64
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.6
1.7%
Low-Moderate Risk
Directly Exposed
CVE-2026-4437MEDIUM5.52
libc-bin
2.39-0ubuntu8.4
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-6238MEDIUM5.52
libc-bin
2.39-0ubuntu8.4
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-4437MEDIUM5.52
libc6
2.39-0ubuntu8.4
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-6238MEDIUM5.52
libc6
2.39-0ubuntu8.4
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-6395MEDIUM5.52
libgnutls30t64
3.8.3-1.1ubuntu3.3
fixed in 3.8.3-1.1ubuntu3.4
0.6%
Theoretical Threat
Directly Exposed
CVE-2025-5351MEDIUM5.52
libssh-4
0.10.6-2build2
fixed in 0.10.6-2ubuntu0.1
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-40225MEDIUM5.44
libsystemd0
255.4-1ubuntu8.6
fixed in 255.4-1ubuntu8.14
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-40226MEDIUM5.44
libsystemd0
255.4-1ubuntu8.6
fixed in 255.4-1ubuntu8.16
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-40225MEDIUM5.44
libudev1
255.4-1ubuntu8.6
fixed in 255.4-1ubuntu8.14
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-40226MEDIUM5.44
libudev1
255.4-1ubuntu8.6
fixed in 255.4-1ubuntu8.16
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-0964MEDIUM5.35
libssh-4
0.10.6-2build2
fixed in 0.10.6-2ubuntu0.3
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-32989MEDIUM5.3
libgnutls30t64
3.8.3-1.1ubuntu3.3
fixed in 3.8.3-1.1ubuntu3.4
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2026-13757MEDIUM5.27
libp11-kit0
0.25.3-4ubuntu2.1
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-15281MEDIUM5.02
libc-bin
2.39-0ubuntu8.4
fixed in 2.39-0ubuntu8.7
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-5435MEDIUM5.02
libc-bin
2.39-0ubuntu8.4
fixed in 2.39-0ubuntu8.8
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-15281MEDIUM5.02
libc6
2.39-0ubuntu8.4
fixed in 2.39-0ubuntu8.7
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-5435MEDIUM5.02
libc6
2.39-0ubuntu8.4
fixed in 2.39-0ubuntu8.8
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69420MEDIUM5.02
libssl3t64
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.7
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-22796MEDIUM5.02
libssl3t64
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.7
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-42770MEDIUM5.02
libssl3t64
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.11
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-9076MEDIUM5.02
libssl3t64
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.11
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-34180MEDIUM5
libssl3t64
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.11
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2025-5702MEDIUM4.76
libc-bin
2.39-0ubuntu8.4
fixed in 2.39-0ubuntu8.5
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-5702MEDIUM4.76
libc6
2.39-0ubuntu8.4
fixed in 2.39-0ubuntu8.5
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-0967MEDIUM4.67
libssh-4
0.10.6-2build2
fixed in 0.10.6-2ubuntu0.3
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-22795MEDIUM4.67
libssl3t64
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.7
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-7383MEDIUM4.67
libssl3t64
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.11
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-27171MEDIUM4.67
zlib1g
1:1.3.dfsg-3.1ubuntu2.1
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-58055MEDIUM4.59
libnghttp2-14
1.59.0-1ubuntu0.2
fixed in 1.59.0-1ubuntu0.4
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-0915MEDIUM4.5
libc-bin
2.39-0ubuntu8.4
fixed in 2.39-0ubuntu8.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-4046MEDIUM4.5
libc-bin
2.39-0ubuntu8.4
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-0915MEDIUM4.5
libc6
2.39-0ubuntu8.4
fixed in 2.39-0ubuntu8.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-4046MEDIUM4.5
libc6
2.39-0ubuntu8.4
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-14831MEDIUM4.5
libgnutls30t64
3.8.3-1.1ubuntu3.3
fixed in 3.8.3-1.1ubuntu3.5
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42015MEDIUM4.5
libgnutls30t64
3.8.3-1.1ubuntu3.3
fixed in 3.8.3-1.1ubuntu3.6
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-34743MEDIUM4.5
liblzma5
5.6.1+really5.4.5-1ubuntu0.2
fixed in 5.6.1+really5.4.5-1ubuntu0.3
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42766MEDIUM4.5
libssl3t64
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.11
1.0%
Theoretical Threat
Directly Exposed
CVE-2026-42767MEDIUM4.5
libssl3t64
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.11
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-5450MEDIUM4.25
libc-bin
2.39-0ubuntu8.4
fixed in 2.39-0ubuntu8.8
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-5928MEDIUM4.25
libc-bin
2.39-0ubuntu8.4
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-5450MEDIUM4.25
libc6
2.39-0ubuntu8.4
fixed in 2.39-0ubuntu8.8
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-5928MEDIUM4.25
libc6
2.39-0ubuntu8.4
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libgssapi-krb5-2
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libk5crypto3
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libkrb5-3
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libkrb5support0
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-8925MEDIUM4.13
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.10
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-8286MEDIUM4.13
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.10
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-8925MEDIUM4.13
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.10
0.6%
Theoretical Threat
Post-Exploit
CVE-2025-15079MEDIUM4.13
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.7
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-8286MEDIUM4.13
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.10
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-28387MEDIUM4.13
openssl
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.9
0.8%
Theoretical Threat
Post-Exploit
CVE-2025-15467MEDIUM4.06
libssl3t64
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.7
47.6%
High Exploitation Risk
Post-Exploit
CVE-2025-15467MEDIUM4.06
openssl
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.7
47.6%
High Exploitation Risk
Post-Exploit
CVE-2026-27456MEDIUM4
libblkid1
2.39.3-9ubuntu6.2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libmount1
2.39.3-9ubuntu6.2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libsmartcols1
2.39.3-9ubuntu6.2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-8114MEDIUM4
libssh-4
0.10.6-2build2
fixed in 0.10.6-2ubuntu0.2
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-68160MEDIUM4
libssl3t64
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.7
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-4598MEDIUM4
libsystemd0
255.4-1ubuntu8.6
fixed in 255.4-1ubuntu8.8
0.7%
Theoretical Threat
Directly Exposed
CVE-2025-4598MEDIUM4
libudev1
255.4-1ubuntu8.6
fixed in 255.4-1ubuntu8.8
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libuuid1
2.39.3-9ubuntu6.2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-8927LOW3.82
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.10
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-5773LOW3.82
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.9
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-6276LOW3.82
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.9
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-41992LOW3.82
gzip
1.12-1ubuntu3
fixed in 1.12-1ubuntu3.2
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-8927LOW3.82
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.10
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-5773LOW3.82
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.9
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-6276LOW3.82
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.9
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-69421LOW3.82
openssl
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.7
0.8%
Theoretical Threat
Post-Exploit
CVE-2025-4877LOW3.82
libssh-4
0.10.6-2build2
fixed in 0.10.6-2ubuntu0.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-9547LOW3.77
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.10
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-9547LOW3.77
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.10
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-34182LOW3.77
openssl
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.11
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-69419LOW3.77
openssl
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.7
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-6965LOW3.61
libsqlite3-0
3.45.1-1ubuntu2.3
fixed in 3.45.1-1ubuntu2.4
74.4%
Actively Exploited
Post-Exploit
CVE-2025-68973LOW3.57
dirmngr
2.4.4-2ubuntu17.2
fixed in 2.4.4-2ubuntu17.4
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-68973LOW3.57
gnupg
2.4.4-2ubuntu17.2
fixed in 2.4.4-2ubuntu17.4
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-68973LOW3.57
gnupg-utils
2.4.4-2ubuntu17.2
fixed in 2.4.4-2ubuntu17.4
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-68973LOW3.57
gpg
2.4.4-2ubuntu17.2
fixed in 2.4.4-2ubuntu17.4
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-68973LOW3.57
gpg-agent
2.4.4-2ubuntu17.2
fixed in 2.4.4-2ubuntu17.4
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-68973LOW3.57
gpgconf
2.4.4-2ubuntu17.2
fixed in 2.4.4-2ubuntu17.4
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-68973LOW3.57
gpgsm
2.4.4-2ubuntu17.2
fixed in 2.4.4-2ubuntu17.4
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-68973LOW3.57
gpgv
2.4.4-2ubuntu17.2
fixed in 2.4.4-2ubuntu17.4
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-8058LOW3.57
libc-bin
2.39-0ubuntu8.4
fixed in 2.39-0ubuntu8.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-8058LOW3.57
libc6
2.39-0ubuntu8.4
fixed in 2.39-0ubuntu8.6
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-31790LOW3.54
openssl
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.9
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-42010LOW3.53
libgnutls30t64
3.8.3-1.1ubuntu3.3
fixed in 3.8.3-1.1ubuntu3.6
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-1965LOW3.47
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.8
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-14819LOW3.47
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.7
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-1965LOW3.47
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.8
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-14819LOW3.47
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.7
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-4438LOW3.4
libc-bin
2.39-0ubuntu8.4
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-4438LOW3.4
libc6
2.39-0ubuntu8.4
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-9820LOW3.4
libgnutls30t64
3.8.3-1.1ubuntu3.3
fixed in 3.8.3-1.1ubuntu3.5
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69418LOW3.4
libssl3t64
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.7
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-9230LOW3.36
openssl
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.6
1.7%
Low-Moderate Risk
Post-Exploit
CVE-2026-5545LOW3.31
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.9
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-6429LOW3.31
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.9
0.5%
Theoretical Threat
Post-Exploit
CVE-2025-14524LOW3.31
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.7
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-3784LOW3.31
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.8
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-8924LOW3.31
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.10
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-5545LOW3.31
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.9
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-6429LOW3.31
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.9
0.5%
Theoretical Threat
Post-Exploit
CVE-2025-14524LOW3.31
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.7
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-3784LOW3.31
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.8
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-8924LOW3.31
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.10
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-5958LOW3.21
sed
4.9-2build1
fixed in 4.9-2ubuntu0.24.04.1
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-3832LOW3.15
libgnutls30t64
3.8.3-1.1ubuntu3.3
fixed in 3.8.3-1.1ubuntu3.6
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-5419LOW3.15
libgnutls30t64
3.8.3-1.1ubuntu3.3
fixed in 3.8.3-1.1ubuntu3.6
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-45446LOW3.15
libssl3t64
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.11
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-4878LOW3.06
libssh-4
0.10.6-2build2
fixed in 0.10.6-2ubuntu0.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-69420LOW3.01
openssl
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.7
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-22796LOW3.01
openssl
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.7
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-42770LOW3.01
openssl
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.11
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-9076LOW3.01
openssl
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.11
0.6%
Theoretical Threat
Post-Exploit
CVE-2025-40909LOW3.01
perl-base
5.38.2-3.2ubuntu0.1
fixed in 5.38.2-3.2ubuntu0.2
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-31789LOW3
libssl3t64
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.9
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-31789LOW3
openssl
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.9
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-8376LOW3
perl-base
5.38.2-3.2ubuntu0.1
fixed in 5.38.2-3.2ubuntu0.3
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-34180LOW3
openssl
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.11
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-6357LOW2.96
pip
24.3.1
fixed in 26.1
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-32988LOW2.95
libgnutls30t64
3.8.3-1.1ubuntu3.3
fixed in 3.8.3-1.1ubuntu3.4
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2025-5318LOW2.92
libssh-4
0.10.6-2build2
fixed in 0.10.6-2ubuntu0.1
2.4%
Low-Moderate Risk
Post-Exploit
CVE-2025-5987LOW2.92
libssh-4
0.10.6-2build2
fixed in 0.10.6-2ubuntu0.1
1.4%
Low-Moderate Risk
Post-Exploit
CVE-2026-45447LOW2.92
libssl3t64
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.11
5.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-45447LOW2.92
openssl
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.11
5.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-3783LOW2.91
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.8
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-3783LOW2.91
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.8
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-45582LOW2.86
tar
1.35+dfsg-3build1
fixed in 1.35+dfsg-3ubuntu0.2
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-22795LOW2.8
openssl
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.7
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-7383LOW2.8
openssl
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.11
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-5704LOW2.8
tar
1.35+dfsg-3build1
fixed in 1.35+dfsg-3ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-8643LOW2.8
pip
24.3.1
fixed in 26.1.2
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-0965LOW2.8
libssh-4
0.10.6-2build2
fixed in 0.10.6-2ubuntu0.3
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-40228LOW2.8
libsystemd0
255.4-1ubuntu8.6
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-40228LOW2.8
libudev1
255.4-1ubuntu8.6
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-33845LOW2.78
libgnutls30t64
3.8.3-1.1ubuntu3.3
fixed in 3.8.3-1.1ubuntu3.6
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-45445LOW2.78
libssl3t64
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.11
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-45445LOW2.78
openssl
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.11
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-42496LOW2.78
perl-base
5.38.2-3.2ubuntu0.1
fixed in 5.38.2-3.2ubuntu0.3
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-33846LOW2.7
libgnutls30t64
3.8.3-1.1ubuntu3.3
fixed in 3.8.3-1.1ubuntu3.6
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2026-42009LOW2.7
libgnutls30t64
3.8.3-1.1ubuntu3.3
fixed in 3.8.3-1.1ubuntu3.6
1.3%
Low-Moderate Risk
Post-Exploit
CVE-2026-28388LOW2.7
libssl3t64
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.9
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-28389LOW2.7
libssl3t64
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.9
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-28390LOW2.7
libssl3t64
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.9
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-28388LOW2.7
openssl
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.9
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-28389LOW2.7
openssl
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.9
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-28390LOW2.7
openssl
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.9
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-6253LOW2.7
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.9
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-7168LOW2.7
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.9
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-4873LOW2.7
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.9
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-6253LOW2.7
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.9
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-7168LOW2.7
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.9
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-4873LOW2.7
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.9
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-42766LOW2.7
openssl
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.11
1.0%
Theoretical Threat
Post-Exploit
CVE-2026-42767LOW2.7
openssl
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.11
0.6%
Theoretical Threat
Post-Exploit
CVE-2025-8869LOW2.7
pip
24.3.1
fixed in 25.3
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-5372LOW2.69
libssh-4
0.10.6-2build2
fixed in 0.10.6-2ubuntu0.1
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-0968LOW2.63
libssh-4
0.10.6-2build2
fixed in 0.10.6-2ubuntu0.3
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-8277LOW2.63
libssh-4
0.10.6-2build2
fixed in 0.10.6-2ubuntu0.3
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-3219LOW2.55
pip
24.3.1
fixed in 26.1
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-32990LOW2.51
libgnutls30t64
3.8.3-1.1ubuntu3.3
fixed in 3.8.3-1.1ubuntu3.4
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-42013LOW2.51
libgnutls30t64
3.8.3-1.1ubuntu3.3
fixed in 3.8.3-1.1ubuntu3.6
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-5260LOW2.51
libgnutls30t64
3.8.3-1.1ubuntu3.3
fixed in 3.8.3-1.1ubuntu3.6
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-0966LOW2.51
libssh-4
0.10.6-2build2
fixed in 0.10.6-2ubuntu0.3
0.6%
Theoretical Threat
Post-Exploit
CVE-2025-15079LOW2.48
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.7
0.5%
Theoretical Threat
Post-Exploit
CVE-2025-14017LOW2.45
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.7
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-10148LOW2.45
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.7
0.5%
Theoretical Threat
Post-Exploit
CVE-2025-14017LOW2.45
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.7
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-10148LOW2.45
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.7
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
bsdutils
1:2.39.3-9ubuntu6.2
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-15224LOW2.4
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.7
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-10536LOW2.4
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.11
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-41991LOW2.4
gzip
1.12-1ubuntu3
fixed in 1.12-1ubuntu3.2
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-15224LOW2.4
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.7
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-10536LOW2.4
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.11
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
mount
2.39.3-9ubuntu6.2
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-68160LOW2.4
openssl
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.7
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
util-linux
2.39.3-9ubuntu6.2
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-69418LOW2.04
openssl
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.7
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-1703LOW1.99
pip
24.3.1
fixed in 26.0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-45446LOW1.89
openssl
3.0.13-0ubuntu3.5
fixed in 3.0.13-0ubuntu3.11
0.4%
Theoretical Threat
Post-Exploit
CVE-2024-56433LOW1.84
passwd
1:4.13+dfsg1-4ubuntu3.2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-69720NONE0
libncursesw6
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.1
0.4%
Theoretical Threat
Not Applicable
CVE-2025-6020NONE0
libpam-modules
1.5.3-5ubuntu5.1
fixed in 1.5.3-5ubuntu5.4
0.4%
Theoretical Threat
Not Applicable
CVE-2025-6020NONE0
libpam-modules-bin
1.5.3-5ubuntu5.1
fixed in 1.5.3-5ubuntu5.4
0.4%
Theoretical Threat
Not Applicable
CVE-2025-6020NONE0
libpam-runtime
1.5.3-5ubuntu5.1
fixed in 1.5.3-5ubuntu5.4
0.4%
Theoretical Threat
Not Applicable
CVE-2025-6020NONE0
libpam0g
1.5.3-5ubuntu5.1
fixed in 1.5.3-5ubuntu5.4
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
libtinfo6
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.1
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
ncurses-base
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.1
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
ncurses-bin
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.1
0.4%
Theoretical Threat
Not Applicable
CVE-2024-10963NONE0
libpam-modules
1.5.3-5ubuntu5.1
fixed in 1.5.3-5ubuntu5.5
0.8%
Theoretical Threat
Not Applicable
CVE-2024-10963NONE0
libpam-modules-bin
1.5.3-5ubuntu5.1
fixed in 1.5.3-5ubuntu5.5
0.8%
Theoretical Threat
Not Applicable
CVE-2024-10963NONE0
libpam-runtime
1.5.3-5ubuntu5.1
fixed in 1.5.3-5ubuntu5.5
0.8%
Theoretical Threat
Not Applicable
CVE-2024-10963NONE0
libpam0g
1.5.3-5ubuntu5.1
fixed in 1.5.3-5ubuntu5.5
0.8%
Theoretical Threat
Not Applicable
CVE-2025-68973NONE0
keyboxd
2.4.4-2ubuntu17.2
fixed in 2.4.4-2ubuntu17.4
0.1%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-modules
1.5.3-5ubuntu5.1
fixed in 1.5.3-5ubuntu5.6
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-modules-bin
1.5.3-5ubuntu5.1
fixed in 1.5.3-5ubuntu5.6
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-runtime
1.5.3-5ubuntu5.1
fixed in 1.5.3-5ubuntu5.6
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam0g
1.5.3-5ubuntu5.1
fixed in 1.5.3-5ubuntu5.6
0.3%
Theoretical Threat
Not Applicable
CVE-2024-56433NONE0
login
1:4.13+dfsg1-4ubuntu3.2
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2025-0167NONE0
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.8
0.7%
Theoretical Threat
Not Applicable
CVE-2026-8458NONE0
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.10
0.3%
Theoretical Threat
Not Applicable
CVE-2026-2219NONE0
dpkg
1.22.6ubuntu6.1
fixed in 1.22.6ubuntu6.6
0.4%
Theoretical Threat
Not Applicable
CVE-2025-6297NONE0
dpkg
1.22.6ubuntu6.1
fixed in 1.22.6ubuntu6.5
0.3%
Theoretical Threat
Not Applicable
CVE-2025-0167NONE0
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.8
0.7%
Theoretical Threat
Not Applicable
CVE-2026-8458NONE0
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.10
0.3%
Theoretical Threat
Not Applicable
CVE-2025-7709NONE0
libsqlite3-0
3.45.1-1ubuntu2.3
fixed in 3.45.1-1ubuntu2.5
0.3%
Theoretical Threat
Not Applicable
CVE-2026-11822NONE0
libsqlite3-0
3.45.1-1ubuntu2.3
fixed in 3.45.1-1ubuntu2.6
0.2%
Theoretical Threat
Not Applicable
CVE-2026-11824NONE0
libsqlite3-0
3.45.1-1ubuntu2.3
fixed in 3.45.1-1ubuntu2.6
0.2%
Theoretical Threat
Not Applicable
CVE-2026-50812NONE0
libsqlite3-0
3.45.1-1ubuntu2.3
fixed in 3.45.1-1ubuntu2.7
0.1%
Theoretical Threat
Not Applicable
CVE-2026-50813NONE0
libsqlite3-0
3.45.1-1ubuntu2.3
fixed in 3.45.1-1ubuntu2.7
0.1%
Theoretical Threat
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Supply chain analysis

Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.