Vulnerability Reportkalilinux/kali-rolling:latest

kalilinux/kali-rolling:latest

digestsha256:f49124869e4eee549315879c3bd7ef92f23b8753fec7544537bcec1493277096

Executive Summary

Last scanned: Aug 15, 2026

Threat ScoreSAFE• No exposed or post-exploit vulnerabilities identified (exposed_total: 0, post_total: 0).• High-reputation Kali Linux community image with 9M+ pulls and a 'RELIABLE' trust verdict.• Pinned by digest (sha256:f491...) ensures immutability and reproducible deployments.• Trust score of 90/100 from a popular community publisher.

0/100SAFE

ReputationPOPULAR COMMUNITY• High Reputation Community Image (9M+ pulls)• Pinned by digest (Immutable)

RELIABLE

This image is safe for production use. The vulnerability scan reported zero exposed and zero post-exploit findings, indicating no known exploitable vulnerabilities in the current context. The image is a popular community distribution from kalilinux with a strong trust score and is pinned by digest, ensuring integrity. While not officially verified, its extensive usage and reliable reputation make it suitable for deployment.

Already in good shape · 1 hardening step left

Included in Pro

Scanning procedure

Vulnerability scan
Full CVE sweep across OS packages and app dependencies
Exploitability check
CVEs ranked by exploit probability (EPSS) and matched against CISA KEV
Reachability analysis
Symbol-level proof: is the vulnerable code even linked and callable in your binaries?
Runtime verification
Live-container probes: exposed endpoints, feature flags, real defaults
Supply chain analysis
Base-image lineage, package provenance and signatures — nothing slipped in unnoticed
Hardening recommendations
A hardened build plan — patch, remove unused packages, lock down the runtime — with parity tests proving nothing broke

Vulnerabilities

Vulnerability Log

0 total

CVE ID	Adjusted Severity	Package	Exploit Probability	Risk Context
No vulnerabilities found matching filters.

Want to check another image? Run a full scan with the Docker Security Scanner.