Vulnerability Reportinfluxdb:3.8.2-enterprise

influxdb:3.8.2-enterprise
digestsha256:1ad7a63f6c4a1b475fe3788216daed093e3aa10156ecd0d71b97befe943f6eff

Executive Summary

Last scanned:

Threat Score
50/100CAUTION
Reputation
TRUSTED

This image carries significant risk; production deployment is highly discouraged without strict compensating controls. Attackers could trigger remote denial-of-service conditions via crafted ECDH ciphertext (CVE-2026-41989) or NegoEx messages (CVE-2026-40356), or bypass certificate validation to spoof services (CVE-2026-3833). The krb5 issues only manifest if a NegoEx mechanism is registered, which is not typical for InfluxDB; however, the gnutls certificate validation bypass affects TLS connections made by the container. Production use should be restricted to trusted networks and include regular patching.

Relevant for influxdb:3.8.2-enterprise

Most CVEs in Go images aren't exploitable

This image is a Go binary — most findings can be ruled out with three commands. How to prove which ones are real.

Read the article

Vulnerabilities

Vulnerability Log

171 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-41989MEDIUM6.38
libgcrypt20
1.10.3-2build1
fixed in 1.10.3-2ubuntu0.1
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-40356MEDIUM6.38
libgssapi-krb5-2
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40356MEDIUM6.38
libk5crypto3
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40356MEDIUM6.38
libkrb5-3
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40355MEDIUM6.38
libkrb5support0
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-40356MEDIUM6.38
libkrb5support0
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-3833MEDIUM6.29
libgnutls30t64
3.8.3-1.1ubuntu3.4
fixed in 3.8.3-1.1ubuntu3.6
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42011MEDIUM6.29
libgnutls30t64
3.8.3-1.1ubuntu3.4
fixed in 3.8.3-1.1ubuntu3.6
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-34182MEDIUM6.29
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42012MEDIUM6.03
libgnutls30t64
3.8.3-1.1ubuntu3.4
fixed in 3.8.3-1.1ubuntu3.6
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-4878MEDIUM5.95
libcap2
1:2.66-5ubuntu2.2
fixed in 1:2.66-5ubuntu2.4
0.2%
Theoretical Threat
Directly Exposed
CVE-2024-2236MEDIUM5.9
libgcrypt20
1.10.3-2build1
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-31790MEDIUM5.9
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.9
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2026-42010MEDIUM5.88
libgnutls30t64
3.8.3-1.1ubuntu3.4
fixed in 3.8.3-1.1ubuntu3.6
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-42014MEDIUM5.61
libgnutls30t64
3.8.3-1.1ubuntu3.4
fixed in 3.8.3-1.1ubuntu3.6
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-4437MEDIUM5.52
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-6238MEDIUM5.52
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-4437MEDIUM5.52
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-6238MEDIUM5.52
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-40225MEDIUM5.44
libsystemd0
255.4-1ubuntu8.12
fixed in 255.4-1ubuntu8.14
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-40226MEDIUM5.44
libsystemd0
255.4-1ubuntu8.12
fixed in 255.4-1ubuntu8.16
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-40225MEDIUM5.44
libudev1
255.4-1ubuntu8.12
fixed in 255.4-1ubuntu8.14
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-40226MEDIUM5.44
libudev1
255.4-1ubuntu8.12
fixed in 255.4-1ubuntu8.16
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-13757MEDIUM5.27
libp11-kit0
0.25.3-4ubuntu2.1
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-5435MEDIUM5.02
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-5435MEDIUM5.02
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-42770MEDIUM5.02
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-9076MEDIUM5.02
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-31789MEDIUM5
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.9
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-34180MEDIUM5
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
1.0%
Low-Moderate Risk
Directly Exposed
CVE-2026-7383MEDIUM4.67
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-27171MEDIUM4.67
zlib1g
1:1.3.dfsg-3.1ubuntu2.1
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-33845MEDIUM4.64
libgnutls30t64
3.8.3-1.1ubuntu3.4
fixed in 3.8.3-1.1ubuntu3.6
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-58055MEDIUM4.59
libnghttp2-14
1.59.0-1ubuntu0.2
fixed in 1.59.0-1ubuntu0.4
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-33846MEDIUM4.5
libgnutls30t64
3.8.3-1.1ubuntu3.4
fixed in 3.8.3-1.1ubuntu3.6
1.3%
Low-Moderate Risk
Directly Exposed
CVE-2026-42009MEDIUM4.5
libgnutls30t64
3.8.3-1.1ubuntu3.4
fixed in 3.8.3-1.1ubuntu3.6
1.3%
Low-Moderate Risk
Directly Exposed
CVE-2026-28388MEDIUM4.5
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.9
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-4046MEDIUM4.5
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-4046MEDIUM4.5
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-14831MEDIUM4.5
libgnutls30t64
3.8.3-1.1ubuntu3.4
fixed in 3.8.3-1.1ubuntu3.5
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-42015MEDIUM4.5
libgnutls30t64
3.8.3-1.1ubuntu3.4
fixed in 3.8.3-1.1ubuntu3.6
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-34743MEDIUM4.5
liblzma5
5.6.1+really5.4.5-1ubuntu0.2
fixed in 5.6.1+really5.4.5-1ubuntu0.3
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42766MEDIUM4.5
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
1.0%
Theoretical Threat
Directly Exposed
CVE-2026-42767MEDIUM4.5
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.6%
Theoretical Threat
Directly Exposed
CVE-2026-5450MEDIUM4.25
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-5928MEDIUM4.25
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-5450MEDIUM4.25
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-5928MEDIUM4.25
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libgssapi-krb5-2
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libk5crypto3
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libkrb5-3
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libkrb5support0
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-42013MEDIUM4.18
libgnutls30t64
3.8.3-1.1ubuntu3.4
fixed in 3.8.3-1.1ubuntu3.6
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-5260MEDIUM4.18
libgnutls30t64
3.8.3-1.1ubuntu3.4
fixed in 3.8.3-1.1ubuntu3.6
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-8925MEDIUM4.13
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.10
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-8286MEDIUM4.13
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.10
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-8925MEDIUM4.13
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.10
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-8286MEDIUM4.13
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.10
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-28387MEDIUM4.13
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.9
0.8%
Theoretical Threat
Post-Exploit
CVE-2026-27456MEDIUM4
libblkid1
2.39.3-9ubuntu6.4
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libmount1
2.39.3-9ubuntu6.4
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libsmartcols1
2.39.3-9ubuntu6.4
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libuuid1
2.39.3-9ubuntu6.4
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27135LOW3.83
libnghttp2-14
1.59.0-1ubuntu0.2
fixed in 1.59.0-1ubuntu0.3
0.8%
Theoretical Threat
Directly Exposed
CVE-2026-8927LOW3.82
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.10
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-5773LOW3.82
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.9
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-6276LOW3.82
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.9
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-41992LOW3.82
gzip
1.12-1ubuntu3.1
fixed in 1.12-1ubuntu3.2
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-8927LOW3.82
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.10
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-5773LOW3.82
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.9
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-6276LOW3.82
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.9
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-9547LOW3.77
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.10
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-9547LOW3.77
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.10
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-34182LOW3.77
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-31790LOW3.54
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.9
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-1965LOW3.47
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.8
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-14819LOW3.47
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.7
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-1965LOW3.47
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.8
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-14819LOW3.47
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.7
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-4438LOW3.4
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-4438LOW3.4
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-9820LOW3.4
libgnutls30t64
3.8.3-1.1ubuntu3.4
fixed in 3.8.3-1.1ubuntu3.5
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-5545LOW3.31
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.9
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-6429LOW3.31
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.9
0.5%
Theoretical Threat
Post-Exploit
CVE-2025-14524LOW3.31
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.7
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-3784LOW3.31
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.8
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-8924LOW3.31
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.10
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-5545LOW3.31
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.9
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-6429LOW3.31
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.9
0.5%
Theoretical Threat
Post-Exploit
CVE-2025-14524LOW3.31
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.7
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-3784LOW3.31
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.8
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-8924LOW3.31
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.10
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-3832LOW3.15
libgnutls30t64
3.8.3-1.1ubuntu3.4
fixed in 3.8.3-1.1ubuntu3.6
0.7%
Theoretical Threat
Directly Exposed
CVE-2026-5419LOW3.15
libgnutls30t64
3.8.3-1.1ubuntu3.4
fixed in 3.8.3-1.1ubuntu3.6
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-45446LOW3.15
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-42770LOW3.01
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-9076LOW3.01
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-31789LOW3
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.9
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-8376LOW3
perl-base
5.38.2-3.2ubuntu0.2
fixed in 5.38.2-3.2ubuntu0.3
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-34180LOW3
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-6357LOW2.96
pip
25.3
fixed in 26.1
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-45447LOW2.92
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
5.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-45447LOW2.92
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
5.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-3783LOW2.91
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.8
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-3783LOW2.91
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.8
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-45582LOW2.86
tar
1.35+dfsg-3build1
fixed in 1.35+dfsg-3ubuntu0.2
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-7383LOW2.8
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-5704LOW2.8
tar
1.35+dfsg-3build1
fixed in 1.35+dfsg-3ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-8643LOW2.8
pip
25.3
fixed in 26.1.2
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-40228LOW2.8
libsystemd0
255.4-1ubuntu8.12
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-40228LOW2.8
libudev1
255.4-1ubuntu8.12
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-45445LOW2.78
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-45445LOW2.78
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-42496LOW2.78
perl-base
5.38.2-3.2ubuntu0.2
fixed in 5.38.2-3.2ubuntu0.3
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-28389LOW2.7
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.9
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-28390LOW2.7
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.9
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-28388LOW2.7
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.9
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-28389LOW2.7
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.9
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-28390LOW2.7
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.9
1.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-6253LOW2.7
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.9
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-7168LOW2.7
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.9
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-4873LOW2.7
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.9
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-6253LOW2.7
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.9
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-7168LOW2.7
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.9
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-4873LOW2.7
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.9
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-42766LOW2.7
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
1.0%
Theoretical Threat
Post-Exploit
CVE-2026-42767LOW2.7
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-3219LOW2.55
pip
25.3
fixed in 26.1
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-15079LOW2.48
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.7
0.5%
Theoretical Threat
Post-Exploit
CVE-2025-15079LOW2.48
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.7
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-28387LOW2.48
libssl3t64
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.9
0.8%
Theoretical Threat
Post-Exploit
CVE-2025-14017LOW2.45
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.7
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-10148LOW2.45
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.7
0.5%
Theoretical Threat
Post-Exploit
CVE-2025-14017LOW2.45
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.7
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-10148LOW2.45
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.7
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
bsdutils
1:2.39.3-9ubuntu6.4
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-15224LOW2.4
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.7
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-10536LOW2.4
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.11
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-41991LOW2.4
gzip
1.12-1ubuntu3.1
fixed in 1.12-1ubuntu3.2
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-15224LOW2.4
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.7
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-10536LOW2.4
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.11
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
mount
2.39.3-9ubuntu6.4
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
util-linux
2.39.3-9ubuntu6.4
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-29111LOW2.39
libsystemd0
255.4-1ubuntu8.12
fixed in 255.4-1ubuntu8.14
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-29111LOW2.39
libudev1
255.4-1ubuntu8.12
fixed in 255.4-1ubuntu8.14
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-40355LOW2.29
libgssapi-krb5-2
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-40355LOW2.29
libk5crypto3
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-40355LOW2.29
libkrb5-3
1.20.1-6ubuntu2.6
fixed in 1.20.1-6ubuntu2.7
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-3731LOW2.29
libssh-4
0.10.6-2ubuntu0.3
fixed in 0.10.6-2ubuntu0.4
0.6%
Theoretical Threat
Post-Exploit
CVE-2026-1703LOW1.99
pip
25.3
fixed in 26.0
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-45446LOW1.89
openssl
3.0.13-0ubuntu3.7
fixed in 3.0.13-0ubuntu3.11
0.4%
Theoretical Threat
Post-Exploit
CVE-2024-56433LOW1.84
passwd
1:4.13+dfsg1-4ubuntu3.2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-69720NONE0
libncursesw6
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.1
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
libtinfo6
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.1
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
ncurses-base
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.1
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
ncurses-bin
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.1
0.4%
Theoretical Threat
Not Applicable
CVE-2026-5958NONE0
sed
4.9-2build1
fixed in 4.9-2ubuntu0.24.04.1
0.1%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-modules
1.5.3-5ubuntu5.5
fixed in 1.5.3-5ubuntu5.6
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-modules-bin
1.5.3-5ubuntu5.5
fixed in 1.5.3-5ubuntu5.6
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-runtime
1.5.3-5ubuntu5.5
fixed in 1.5.3-5ubuntu5.6
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam0g
1.5.3-5ubuntu5.5
fixed in 1.5.3-5ubuntu5.6
0.3%
Theoretical Threat
Not Applicable
CVE-2024-56433NONE0
login
1:4.13+dfsg1-4ubuntu3.2
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2025-0167NONE0
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.8
0.7%
Theoretical Threat
Not Applicable
CVE-2026-8458NONE0
curl
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.10
0.3%
Theoretical Threat
Not Applicable
CVE-2026-2219NONE0
dpkg
1.22.6ubuntu6.5
fixed in 1.22.6ubuntu6.6
0.4%
Theoretical Threat
Not Applicable
CVE-2025-0167NONE0
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.8
0.7%
Theoretical Threat
Not Applicable
CVE-2026-8458NONE0
libcurl4t64
8.5.0-2ubuntu10.6
fixed in 8.5.0-2ubuntu10.10
0.3%
Theoretical Threat
Not Applicable
CVE-2026-11822NONE0
libsqlite3-0
3.45.1-1ubuntu2.5
fixed in 3.45.1-1ubuntu2.6
0.2%
Theoretical Threat
Not Applicable
CVE-2026-11824NONE0
libsqlite3-0
3.45.1-1ubuntu2.5
fixed in 3.45.1-1ubuntu2.6
0.2%
Theoretical Threat
Not Applicable
CVE-2026-50812NONE0
libsqlite3-0
3.45.1-1ubuntu2.5
fixed in 3.45.1-1ubuntu2.7
0.1%
Theoretical Threat
Not Applicable
CVE-2026-50813NONE0
libsqlite3-0
3.45.1-1ubuntu2.5
fixed in 3.45.1-1ubuntu2.7
0.1%
Theoretical Threat
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Supply chain analysis

Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.