Last scanned:
This image is acceptable for production, but remediating the identified vulnerabilities is recommended to reduce the attack surface. The main findings are denial-of-service flaws in the Jackson JSON libraries, with a maximum severity of 6.0 and none known to be actively exploited. CVE-2026-89407 only matters if numeric coercion is used on inbound JSON, and CVE-2026-89425 only applies if the parser reads from a DataInput source that the default inputs may not use. An attacker exploiting these could stall event ingestion or crash the Logstash process, which would disrupt the pipeline but not expose data. Because the exposed findings exist but are conditional and moderate, they do not drive the verdict, though upgrading the Jackson libraries would reduce risk.
| CVE ID | Adjusted Severity | Package | Exploit Probability | Risk Context |
|---|---|---|---|---|
| CVE-2026-89407 | MEDIUM6 | com.fasterxml.jackson.core:jackson-core 2.18.9 fixed in 2.18.11, 2.21.7, 2.22.3 | 0.6% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-89425 | MEDIUM6 | com.fasterxml.jackson.core:jackson-core 2.18.9 fixed in 2.21.7, 2.22.3, 2.18.11 | 0.5% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-89407 | MEDIUM6 | com.fasterxml.jackson.core:jackson-core 2.21.6 fixed in 2.18.11, 2.21.7, 2.22.3 | 0.6% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-89425 | MEDIUM6 | com.fasterxml.jackson.core:jackson-core 2.21.6 fixed in 2.21.7, 2.22.3, 2.18.11 | 0.5% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-68497 | MEDIUM6 | com.fasterxml.jackson.core:jackson-databind 2.18.9 fixed in 2.18.10, 2.21.6, 2.22.2 | 0.6% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-89407 | MEDIUM6 | tools.jackson.core:jackson-core 3.1.6 fixed in 3.1.7, 3.2.2 | 0.6% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-89425 | MEDIUM6 | tools.jackson.core:jackson-core 3.1.6 fixed in 3.1.7, 3.2.3 | 0.5% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-72897 | MEDIUM5.9 | openssl-libs 1:3.5.8-2.el9_8 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-75805 | MEDIUM5.9 | openssl-libs 1:3.5.8-2.el9_8 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-77696 | MEDIUM5.9 | openssl-libs 1:3.5.8-2.el9_8 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-50812 | MEDIUM5.5 | sqlite-libs 3.34.1-11.el9_8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-15059 | MEDIUM5.5 | systemd-libs 252-67.el9_8.6 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-1489 | MEDIUM5.4 | glib2 2.68.4-19.el9_8.10 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-86469 | MEDIUM5.3 | glib2 2.68.4-19.el9_8.10 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-8674 | MEDIUM5.3 | glibc 2.34-283.el9_8 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-8674 | MEDIUM5.3 | glibc-common 2.34-283.el9_8 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-8674 | MEDIUM5.3 | glibc-minimal-langpack 2.34-283.el9_8 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-42772 | MEDIUM5.3 | openssl-libs 1:3.5.8-2.el9_8 No fix yet | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-54873 | MEDIUM5.3 | openssl-libs 1:3.5.8-2.el9_8 No fix yet | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-75804 | MEDIUM5.3 | openssl-libs 1:3.5.8-2.el9_8 No fix yet | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-75806 | MEDIUM5.3 | openssl-libs 1:3.5.8-2.el9_8 No fix yet | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-84784 | MEDIUM5.3 | openssl-libs 1:3.5.8-2.el9_8 No fix yet | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-34743 | MEDIUM5.3 | xz-libs 5.2.5-8.el9_0 fixed in 5.2.5-8.el9_8.1 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-42250 | MEDIUM5 | bzip2-libs 1.0.8-11.el9 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-54875 | MEDIUM4.7 | openssl-libs 1:3.5.8-2.el9_8 No fix yet | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-91776 | MEDIUM4.5 | com.fasterxml.jackson.core:jackson-databind 2.18.9 fixed in 2.18.11, 2.21.7, 2.22.3 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-91777 | MEDIUM4.5 | com.fasterxml.jackson.core:jackson-databind 2.18.9 fixed in 2.21.7, 2.18.11, 2.22.3 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-91776 | MEDIUM4.5 | com.fasterxml.jackson.core:jackson-databind 2.21.6 fixed in 2.18.11, 2.21.7, 2.22.3 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-91777 | MEDIUM4.5 | com.fasterxml.jackson.core:jackson-databind 2.21.6 fixed in 2.21.7, 2.18.11, 2.22.3 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-91776 | MEDIUM4.5 | tools.jackson.core:jackson-databind 3.1.6 fixed in 3.1.7, 3.2.3 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-91777 | MEDIUM4.5 | tools.jackson.core:jackson-databind 3.1.6 fixed in 3.1.7, 3.2.3 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-83557 | MEDIUM4.48 | com.fasterxml.jackson.core:jackson-databind 2.18.9 fixed in 2.18.10, 2.21.6, 2.22.2 | 0.7% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-19032 | MEDIUM4.24 | com.fasterxml.jackson.core:jackson-databind 2.18.9 fixed in 2.18.10, 2.21.6, 2.22.2 | 0.6% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-106451 | MEDIUM4.2 | at.yawk.lz4:lz4-java 1.10.1 fixed in 1.11.4 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-1484 | MEDIUM4.2 | glib2 2.68.4-19.el9_8.10 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-89092 | MEDIUM4.2 | glibc 2.34-283.el9_8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-89092 | MEDIUM4.2 | glibc-common 2.34-283.el9_8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-89092 | MEDIUM4.2 | glibc-minimal-langpack 2.34-283.el9_8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-9545 | MEDIUM4.14 | curl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-9546 | MEDIUM4.14 | curl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-107161 | MEDIUM4.14 | cyrus-sasl-lib 2.1.27-22.el9 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-86805 | MEDIUM4.14 | glibc 2.34-283.el9_8 No fix yet | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-95818 | MEDIUM4.14 | glibc 2.34-283.el9_8 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-86805 | MEDIUM4.14 | glibc-common 2.34-283.el9_8 No fix yet | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-95818 | MEDIUM4.14 | glibc-common 2.34-283.el9_8 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-86805 | MEDIUM4.14 | glibc-minimal-langpack 2.34-283.el9_8 No fix yet | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-95818 | MEDIUM4.14 | glibc-minimal-langpack 2.34-283.el9_8 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-88647 | MEDIUM4.14 | gnutls 3.8.10-9.el9_8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-88648 | MEDIUM4.14 | gnutls 3.8.10-9.el9_8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-9545 | MEDIUM4.14 | libcurl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-9546 | MEDIUM4.14 | libcurl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-102010 | MEDIUM4.14 | libgcc 11.5.0-14.el9 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-95619 | MEDIUM4.14 | libgcc 11.5.0-14.el9 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-102010 | MEDIUM4.14 | libstdc++ 11.5.0-14.el9 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-95619 | MEDIUM4.14 | libstdc++ 11.5.0-14.el9 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-95519 | MEDIUM4.14 | rpm 4.16.1.3-40.el9 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-95520 | MEDIUM4.14 | rpm 4.16.1.3-40.el9 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-95521 | MEDIUM4.14 | rpm 4.16.1.3-40.el9 No fix yet | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-78367 | MEDIUM4.14 | rpm-libs 4.16.1.3-40.el9 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-84837 | MEDIUM4.14 | rpm-libs 4.16.1.3-40.el9 No fix yet | 1.3% Low-Moderate Risk | Directly Exposed |
| CVE-2026-95519 | MEDIUM4.14 | rpm-libs 4.16.1.3-40.el9 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-95520 | MEDIUM4.14 | rpm-libs 4.16.1.3-40.el9 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-95521 | MEDIUM4.14 | rpm-libs 4.16.1.3-40.el9 No fix yet | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2025-13034 | MEDIUM4.08 | curl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-13034 | MEDIUM4.08 | libcurl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-22185 | MEDIUM4.08 | openldap 2.6.8-4.el9 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-4105 | MEDIUM4.02 | systemd-libs 252-67.el9_8.6 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| GHSA-3553-vcg5-72jw | MEDIUM4 | dalli 3.2.10 fixed in ~> 3.2.12, ~> 4.3.6, ~> 5.0.9, ~> 5.1.3, >= 5.2.1 | — | Directly Exposed |
| GHSA-4qp6-2jcr-596v | MEDIUM4 | dalli 3.2.10 fixed in ~> 3.2.12, ~> 4.3.6, ~> 5.0.9, ~> 5.1.3, >= 5.2.1 | — | Directly Exposed |
| GHSA-p6pm-ch9v-44vx | MEDIUM4 | dalli 3.2.10 fixed in ~> 3.2.12, ~> 4.3.6, ~> 5.0.9, ~> 5.1.3, >= 5.2.1 | — | Directly Exposed |
| GHSA-w39f-xq2m-4g8x | MEDIUM4 | dalli 3.2.10 fixed in ~> 3.2.13, ~> 4.3.7, ~> 5.0.9, ~> 5.1.3, >= 5.2.1 | — | Directly Exposed |
| GHSA-wr87-m4jw-29x5 | MEDIUM4 | dalli 3.2.10 fixed in ~> 3.2.13, ~> 4.3.7, ~> 5.0.10, ~> 5.1.4, >= 5.2.2 | — | Directly Exposed |
| CVE-2026-19931 | LOW3.9 | curl-minimal 7.76.1-40.el9_8.8 No fix yet | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-3784 | LOW3.9 | curl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-5545 | LOW3.9 | curl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-6429 | LOW3.9 | curl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-92388 | LOW3.9 | curl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-107778 | LOW3.9 | krb5-libs 1.21.1-10.el9_8 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-19931 | LOW3.9 | libcurl-minimal 7.76.1-40.el9_8.8 No fix yet | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-3784 | LOW3.9 | libcurl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-5545 | LOW3.9 | libcurl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-6429 | LOW3.9 | libcurl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-92388 | LOW3.9 | libcurl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-9149 | LOW3.9 | libsolv 0.7.24-6.el9_8 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-9150 | LOW3.9 | libsolv 0.7.24-6.el9_8 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-33056 | LOW3.9 | tar 2:1.34-13.el9_8 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-59949 | LOW3.9 | at.yawk.lz4:lz4-java 1.10.1 fixed in 1.11.1 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2024-41996 | LOW3.9 | openssl-libs 1:3.5.8-2.el9_8 No fix yet | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-28387 | LOW3.9 | openssl-libs 1:3.5.8-2.el9_8 No fix yet | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-28388 | LOW3.9 | openssl-libs 1:3.5.8-2.el9_8 No fix yet | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2026-28389 | LOW3.9 | openssl-libs 1:3.5.8-2.el9_8 No fix yet | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-31789 | LOW3.9 | openssl-libs 1:3.5.8-2.el9_8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-42765 | LOW3.9 | openssl-libs 1:3.5.8-2.el9_8 No fix yet | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2022-41409 | LOW3.9 | pcre2 10.40-7.el9_8 No fix yet | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2022-41409 | LOW3.9 | pcre2-syntax 10.40-7.el9_8 No fix yet | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-27171 | LOW3.9 | zlib 1.2.11-40.el9 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-5958 | LOW3.78 | sed 4.8-10.el9 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-92822 | LOW3.72 | libmodulemd 2.13.0-2.el9 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-92823 | LOW3.72 | libmodulemd 2.13.0-2.el9 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-92824 | LOW3.72 | libmodulemd 2.13.0-2.el9 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-1757 | LOW3.72 | libxml2 2.9.13-14.el9_8.5 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-0988 | LOW3.7 | glib2 2.68.4-19.el9_8.10 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-97399 | LOW3.7 | glibc 2.34-283.el9_8 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-97399 | LOW3.7 | glibc-common 2.34-283.el9_8 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-97399 | LOW3.7 | glibc-minimal-langpack 2.34-283.el9_8 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-35189 | LOW3.7 | openssl-libs 1:3.5.8-2.el9_8 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-35191 | LOW3.7 | openssl-libs 1:3.5.8-2.el9_8 No fix yet | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-56391 | LOW3.66 | coreutils-single 8.32-41.el9_8.1 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-67693 | LOW3.54 | gnutls 3.8.10-9.el9_8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-0990 | LOW3.54 | libxml2 2.9.13-14.el9_8.5 No fix yet | 1.0% Theoretical Threat | Directly Exposed |
| CVE-2026-54872 | LOW3.54 | openssl 1:3.5.8-2.el9_8 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-72897 | LOW3.54 | openssl 1:3.5.8-2.el9_8 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-75805 | LOW3.54 | openssl 1:3.5.8-2.el9_8 No fix yet | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-77696 | LOW3.54 | openssl 1:3.5.8-2.el9_8 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-54872 | LOW3.54 | openssl-libs 1:3.5.8-2.el9_8 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-71847 | LOW3.54 | json 2.20.0 fixed in >= 2.21.2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2023-32636 | LOW3.31 | glib2 2.68.4-19.el9_8.10 No fix yet | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2024-13176 | LOW3.31 | openssl-libs 1:3.5.8-2.el9_8 No fix yet | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2024-0232 | LOW3.31 | sqlite-libs 3.34.1-11.el9_8 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-60753 | LOW3.3 | libarchive 3.5.3-11.el9_8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-5745 | LOW3.3 | libarchive 3.5.3-11.el9_8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-82327 | LOW3.3 | libsolv 0.7.24-6.el9_8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-53655 | LOW3.3 | tar 2:1.34-13.el9_8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-41990 | LOW3.3 | libgcrypt 1.10.0-13.el9_8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-70873 | LOW3.3 | sqlite-libs 3.34.1-11.el9_8 No fix yet | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-4873 | LOW3.18 | curl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-6253 | LOW3.18 | curl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-7168 | LOW3.18 | curl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-4873 | LOW3.18 | libcurl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-6253 | LOW3.18 | libcurl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-7168 | LOW3.18 | libcurl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-42772 | LOW3.18 | openssl 1:3.5.8-2.el9_8 No fix yet | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-54873 | LOW3.18 | openssl 1:3.5.8-2.el9_8 No fix yet | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2026-75804 | LOW3.18 | openssl 1:3.5.8-2.el9_8 No fix yet | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-75806 | LOW3.18 | openssl 1:3.5.8-2.el9_8 No fix yet | 1.1% Low-Moderate Risk | Post-Exploit |
| CVE-2026-84784 | LOW3.18 | openssl 1:3.5.8-2.el9_8 No fix yet | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-59875 | LOW3.18 | tar 2:1.34-13.el9_8 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-106450 | LOW3.18 | at.yawk.lz4:lz4-java 1.10.1 fixed in 1.11.4 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-106452 | LOW3.18 | at.yawk.lz4:lz4-java 1.10.1 fixed in 1.11.2 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-106453 | LOW3.18 | at.yawk.lz4:lz4-java 1.10.1 fixed in 1.11.2 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-3360 | LOW3.15 | glib2 2.68.4-19.el9_8.10 No fix yet | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2025-7039 | LOW3.15 | glib2 2.68.4-19.el9_8.10 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-9232 | LOW3.1 | openssl-libs 1:3.5.8-2.el9_8 No fix yet | 2.0% Low-Moderate Risk | Directly Exposed |
| CVE-2026-11850 | LOW3 | krb5-libs 1.21.1-10.el9_8 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-107708 | LOW2.94 | krb5-libs 1.21.1-10.el9_8 No fix yet | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-53615 | LOW2.88 | libblkid 2.37.4-25.el9 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53615 | LOW2.88 | libmount 2.37.4-25.el9 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53615 | LOW2.88 | libsmartcols 2.37.4-25.el9 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53615 | LOW2.88 | libuuid 2.37.4-25.el9 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2025-14017 | LOW2.88 | curl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2025-14017 | LOW2.88 | libcurl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2025-68972 | LOW2.82 | gnupg2 2.3.3-5.el9_7 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-54875 | LOW2.82 | openssl 1:3.5.8-2.el9_8 No fix yet | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2025-64118 | LOW2.82 | tar 2:1.34-13.el9_8 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-1485 | LOW2.8 | glib2 2.68.4-19.el9_8.10 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2023-30571 | LOW2.7 | libarchive 3.5.3-11.el9_8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2024-7264 | LOW2.69 | curl-minimal 7.76.1-40.el9_8.8 No fix yet | 20.2% High Exploitation Risk | Directly Exposed |
| CVE-2024-7264 | LOW2.69 | libcurl-minimal 7.76.1-40.el9_8.8 No fix yet | 20.2% High Exploitation Risk | Directly Exposed |
| CVE-2026-53613 | LOW2.52 | libblkid 2.37.4-25.el9 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53613 | LOW2.52 | libmount 2.37.4-25.el9 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53613 | LOW2.52 | libsmartcols 2.37.4-25.el9 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53613 | LOW2.52 | libuuid 2.37.4-25.el9 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-18739 | LOW2.5 | popt 1.18-8.el9 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-18743 | LOW2.5 | popt 1.18-8.el9 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-5773 | LOW2.48 | curl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-8932 | LOW2.48 | curl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-9080 | LOW2.48 | curl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-5773 | LOW2.48 | libcurl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-8932 | LOW2.48 | libcurl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-9080 | LOW2.48 | libcurl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-103242 | LOW2.48 | rpm 4.16.1.3-40.el9 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-78367 | LOW2.48 | rpm 4.16.1.3-40.el9 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-84837 | LOW2.48 | rpm 4.16.1.3-40.el9 No fix yet | 1.3% Low-Moderate Risk | Post-Exploit |
| CVE-2026-103242 | LOW2.48 | rpm-libs 4.16.1.3-40.el9 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2005-2541 | LOW2.48 | tar 2:1.34-13.el9_8 No fix yet | 4.0% Low-Moderate Risk | Post-Exploit |
| CVE-2026-59871 | LOW2.48 | tar 2:1.34-13.el9_8 No fix yet | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-4426 | LOW2.34 | libarchive 3.5.3-11.el9_8 No fix yet | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2024-11053 | LOW2.34 | curl-minimal 7.76.1-40.el9_8.8 No fix yet | 2.0% Low-Moderate Risk | Directly Exposed |
| CVE-2024-9681 | LOW2.34 | curl-minimal 7.76.1-40.el9_8.8 No fix yet | 2.0% Low-Moderate Risk | Directly Exposed |
| CVE-2025-14524 | LOW2.34 | curl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2025-15079 | LOW2.34 | curl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2025-15224 | LOW2.34 | curl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-6276 | LOW2.34 | curl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-86409 | LOW2.34 | curl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-86414 | LOW2.34 | curl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-92390 | LOW2.34 | curl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-24883 | LOW2.34 | gnupg2 2.3.3-5.el9_7 No fix yet | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-15028 | LOW2.34 | libarchive 3.5.3-11.el9_8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2024-11053 | LOW2.34 | libcurl-minimal 7.76.1-40.el9_8.8 No fix yet | 2.0% Low-Moderate Risk | Directly Exposed |
| CVE-2024-9681 | LOW2.34 | libcurl-minimal 7.76.1-40.el9_8.8 No fix yet | 2.0% Low-Moderate Risk | Directly Exposed |
| CVE-2025-14524 | LOW2.34 | libcurl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2025-15079 | LOW2.34 | libcurl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2025-15224 | LOW2.34 | libcurl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-6276 | LOW2.34 | libcurl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-86409 | LOW2.34 | libcurl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-86414 | LOW2.34 | libcurl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-92390 | LOW2.34 | libcurl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-27113 | LOW2.34 | libxml2 2.9.13-14.el9_8.5 No fix yet | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2023-50495 | LOW2.34 | ncurses-base 6.2-12.20210508.el9 No fix yet | 1.0% Low-Moderate Risk | Post-Exploit |
| CVE-2023-50495 | LOW2.34 | ncurses-libs 6.2-12.20210508.el9 No fix yet | 1.0% Low-Moderate Risk | Post-Exploit |
| CVE-2024-41996 | LOW2.34 | openssl 1:3.5.8-2.el9_8 No fix yet | 1.1% Low-Moderate Risk | Post-Exploit |
| CVE-2026-28387 | LOW2.34 | openssl 1:3.5.8-2.el9_8 No fix yet | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2026-28388 | LOW2.34 | openssl 1:3.5.8-2.el9_8 No fix yet | 0.9% Theoretical Threat | Post-Exploit |
| CVE-2026-28389 | LOW2.34 | openssl 1:3.5.8-2.el9_8 No fix yet | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2026-31789 | LOW2.34 | openssl 1:3.5.8-2.el9_8 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-42765 | LOW2.34 | openssl 1:3.5.8-2.el9_8 No fix yet | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-44605 | LOW2.34 | rpm 4.16.1.3-40.el9 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-44605 | LOW2.34 | rpm-libs 4.16.1.3-40.el9 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-18924 | LOW2.22 | curl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-80230 | LOW2.22 | curl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-87864 | LOW2.22 | curl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-92389 | LOW2.22 | curl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-92391 | LOW2.22 | curl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-18924 | LOW2.22 | libcurl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-80230 | LOW2.22 | libcurl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-87864 | LOW2.22 | libcurl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-92389 | LOW2.22 | libcurl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-92391 | LOW2.22 | libcurl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-0989 | LOW2.22 | libxml2 2.9.13-14.el9_8.5 No fix yet | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-35189 | LOW2.22 | openssl 1:3.5.8-2.el9_8 No fix yet | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-35191 | LOW2.22 | openssl 1:3.5.8-2.el9_8 No fix yet | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2026-106449 | LOW2.22 | at.yawk.lz4:lz4-java 1.10.1 fixed in 1.11.4 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-18839 | LOW2.2 | popt 1.18-8.el9 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-105712 | LOW2.16 | gnupg2 2.3.3-5.el9_7 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-17591 | LOW2.16 | libarchive 3.5.3-11.el9_8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2023-4156 | LOW1.99 | gawk 5.1.0-6.el9_8.1 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2025-30258 | LOW1.99 | gnupg2 2.3.3-5.el9_7 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2025-1632 | LOW1.99 | libarchive 3.5.3-11.el9_8 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-5915 | LOW1.99 | libarchive 3.5.3-11.el9_8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-5916 | LOW1.99 | libarchive 3.5.3-11.el9_8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-5917 | LOW1.99 | libarchive 3.5.3-11.el9_8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-5918 | LOW1.99 | libarchive 3.5.3-11.el9_8 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2021-46195 | LOW1.99 | libgcc 11.5.0-14.el9 No fix yet | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2022-27943 | LOW1.99 | libgcc 11.5.0-14.el9 No fix yet | 1.0% Theoretical Threat | Directly Exposed |
| CVE-2021-46195 | LOW1.99 | libstdc++ 11.5.0-14.el9 No fix yet | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2022-27943 | LOW1.99 | libstdc++ 11.5.0-14.el9 No fix yet | 1.0% Theoretical Threat | Directly Exposed |
| CVE-2023-45322 | LOW1.99 | libxml2 2.9.13-14.el9_8.5 No fix yet | 1.0% Theoretical Threat | Directly Exposed |
| CVE-2024-13176 | LOW1.99 | openssl 1:3.5.8-2.el9_8 No fix yet | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-94266 | LOW1.98 | curl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-94266 | LOW1.98 | libcurl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-13595 | LOW1.91 | libblkid 2.37.4-25.el9 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-13595 | LOW1.91 | libmount 2.37.4-25.el9 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-13595 | LOW1.91 | libsmartcols 2.37.4-25.el9 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-13595 | LOW1.91 | libuuid 2.37.4-25.el9 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-82209 | LOW1.86 | curl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-82209 | LOW1.86 | libcurl-minimal 7.76.1-40.el9_8.8 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-9232 | LOW1.86 | openssl 1:3.5.8-2.el9_8 No fix yet | 2.0% Low-Moderate Risk | Post-Exploit |
| CVE-2026-57062 | LOW1.74 | gnupg2 2.3.3-5.el9_7 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-0992 | LOW1.74 | libxml2 2.9.13-14.el9_8.5 No fix yet | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-27456 | LOW1.69 | libblkid 2.37.4-25.el9 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-27456 | LOW1.69 | libmount 2.37.4-25.el9 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-27456 | LOW1.69 | libsmartcols 2.37.4-25.el9 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-27456 | LOW1.69 | libuuid 2.37.4-25.el9 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2022-3219 | LOW1.68 | gnupg2 2.3.3-5.el9_7 No fix yet | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2023-39804 | LOW1.68 | tar 2:1.34-13.el9_8 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
Which CVEs are actually reachable — is the vulnerable code even linked and callable.
Live-container probes: default user, writable paths, capabilities, exposed ports.
Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.
A step-by-step hardened build plan, with parity tests proving nothing breaks.
Want to check another image? Run a full scan with the Docker Security Scanner.