Vulnerability Reportpostgres:17

digestsha256:ebba4f4de37f08f138f97c1443c987a435e783177afedcc4aaf2da1930fbc37a

Executive Summary

Last scanned:

Threat Score
74/100CAUTION
Reputation
TRUSTED

This image carries significant risk; production deployment is highly discouraged without strict compensating controls. The most critical vulnerability, CVE-2026-6653, is a use-after-free in libxml2 that could allow remote denial of service or potential code execution via crafted XML input; PostgreSQL uses this library for XML parsing, so the risk is present unless XML features are disabled. Six exposed vulnerabilities have severity >=6.0, expanding the attack surface. Note that CVE-2026-6653 is only exploitable if the database accepts XML input, but no default configuration prevents this. Post-exploit vulnerabilities are low severity and do not alter the risk profile.

Vulnerabilities

Vulnerability Log

335 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-6653HIGH8.33
libxml2
2.12.7+dfsg+really2.9.14-2.1+deb13u3
No fix yet
0.3%
Theoretical Threat
Directly ExposedContext importance: HIGH
CVE-2026-48962MEDIUM6.63
libperl5.40
5.40.1-6
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11979MEDIUM6.63
libxml2
2.12.7+dfsg+really2.9.14-2.1+deb13u3
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-42497MEDIUM6.38
libperl5.40
5.40.1-6
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-9538MEDIUM6.38
libperl5.40
5.40.1-6
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-54369MEDIUM6.03
libacl1
2.3.2-2+b1
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2024-2236MEDIUM5.9
libgcrypt20
1.11.0-7+deb13u1
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-26461MEDIUM5.9
libgssapi-krb5-2
1.21.3-5+deb13u1
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-26461MEDIUM5.9
libk5crypto3
1.21.3-5+deb13u1
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-26461MEDIUM5.9
libkrb5-3
1.21.3-5+deb13u1
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2024-26461MEDIUM5.9
libkrb5support0
1.21.3-5+deb13u1
No fix yet
1.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-22185MEDIUM5.78
libldap2
2.6.10+dfsg-1
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2011-3389MEDIUM5.59
libgnutls30t64
3.8.9-3+deb13u4
No fix yet
73.3%
Actively Exploited
Directly Exposed
CVE-2026-6238MEDIUM5.52
libc-bin
2.41-12+deb13u3
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-6238MEDIUM5.52
libc6
2.41-12+deb13u3
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2025-15649MEDIUM5.52
libperl5.40
5.40.1-6
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-54370MEDIUM5.35
libacl1
2.3.2-2+b1
No fix yet
<0.1%
Theoretical Threat
Directly Exposed
CVE-2026-54371MEDIUM5.35
libattr1
1:2.5.2-3
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2019-1010024MEDIUM5.3
libc-bin
2.41-12+deb13u3
No fix yet
3.2%
Low-Moderate Risk
Directly Exposed
CVE-2019-1010025MEDIUM5.3
libc-bin
2.41-12+deb13u3
No fix yet
2.3%
Low-Moderate Risk
Directly Exposed
CVE-2019-1010024MEDIUM5.3
libc6
2.41-12+deb13u3
No fix yet
3.2%
Low-Moderate Risk
Directly Exposed
CVE-2019-1010025MEDIUM5.3
libc6
2.41-12+deb13u3
No fix yet
2.3%
Low-Moderate Risk
Directly Exposed
CVE-2015-9019MEDIUM5.3
libxslt1.1
1.1.35-1.2+deb13u3
No fix yet
2.1%
Low-Moderate Risk
Directly Exposed
CVE-2026-13757MEDIUM5.27
libp11-kit0
0.25.5-3
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2025-14104MEDIUM5.18
libblkid1
2.41-5
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-14104MEDIUM5.18
libmount1
2.41-5
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-14104MEDIUM5.18
libsmartcols1
2.41-5
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2025-14104MEDIUM5.18
libuuid1
2.41-5
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-5435MEDIUM5.02
libc-bin
2.41-12+deb13u3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-5435MEDIUM5.02
libc6
2.41-12+deb13u3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2024-26458MEDIUM5.02
libgssapi-krb5-2
1.21.3-5+deb13u1
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2024-26458MEDIUM5.02
libk5crypto3
1.21.3-5+deb13u1
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2024-26458MEDIUM5.02
libkrb5-3
1.21.3-5+deb13u1
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2024-26458MEDIUM5.02
libkrb5support0
1.21.3-5+deb13u1
No fix yet
0.8%
Theoretical Threat
Directly Exposed
CVE-2022-0563MEDIUM4.67
libblkid1
2.41-5
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2022-0563MEDIUM4.67
libmount1
2.41-5
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2022-0563MEDIUM4.67
libsmartcols1
2.41-5
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2022-0563MEDIUM4.67
libuuid1
2.41-5
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2025-10911MEDIUM4.67
libxslt1.1
1.1.35-1.2+deb13u3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-27171MEDIUM4.67
zlib1g
1:1.3.dfsg+really1.3.1-1+b1
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-42496MEDIUM4.64
perl
5.40.1-6
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-42496MEDIUM4.64
perl-base
5.40.1-6
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-42496MEDIUM4.64
perl-modules-5.40
5.40.1-6
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13595MEDIUM4.5
libblkid1
2.41-5
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-3184MEDIUM4.5
libblkid1
2.41-5
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libmount1
2.41-5
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-3184MEDIUM4.5
libmount1
2.41-5
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-12087MEDIUM4.5
libperl5.40
5.40.1-6
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libsmartcols1
2.41-5
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-3184MEDIUM4.5
libsmartcols1
2.41-5
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2023-31437MEDIUM4.5
libsystemd0
257.13-1~deb13u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-31438MEDIUM4.5
libsystemd0
257.13-1~deb13u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-31439MEDIUM4.5
libsystemd0
257.13-1~deb13u1
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2023-31437MEDIUM4.5
libudev1
257.13-1~deb13u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-31438MEDIUM4.5
libudev1
257.13-1~deb13u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2023-31439MEDIUM4.5
libudev1
257.13-1~deb13u1
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-13595MEDIUM4.5
libuuid1
2.41-5
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-3184MEDIUM4.5
libuuid1
2.41-5
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2021-45346MEDIUM4.3
libsqlite3-0
3.46.1-7+deb13u1
No fix yet
1.6%
Low-Moderate Risk
Directly Exposed
CVE-2026-42250MEDIUM4.25
libbz2-1.0
1.0.8-6
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-5450MEDIUM4.25
libc-bin
2.41-12+deb13u3
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-5928MEDIUM4.25
libc-bin
2.41-12+deb13u3
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-5450MEDIUM4.25
libc6
2.41-12+deb13u3
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-5928MEDIUM4.25
libc6
2.41-12+deb13u3
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libgssapi-krb5-2
1.21.3-5+deb13u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libk5crypto3
1.21.3-5+deb13u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libkrb5-3
1.21.3-5+deb13u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-11850MEDIUM4.25
libkrb5support0
1.21.3-5+deb13u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-48959MEDIUM4.25
libperl5.40
5.40.1-6
No fix yet
0.4%
Theoretical Threat
Directly Exposed
CVE-2026-48961MEDIUM4.25
libperl5.40
5.40.1-6
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2020-15719MEDIUM4.2
libldap2
2.6.10+dfsg-1
No fix yet
2.4%
Low-Moderate Risk
Directly Exposed
CVE-2026-54411MEDIUM4.08
libpam-modules
1.7.0-5
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-54411MEDIUM4.08
libpam-modules-bin
1.7.0-5
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-54411MEDIUM4.08
libpam-runtime
1.7.0-5
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-54411MEDIUM4.08
libpam0g
1.7.0-5
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libblkid1
2.41-5
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2017-14159MEDIUM4
libldap2
2.6.10+dfsg-1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libmount1
2.41-5
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libsmartcols1
2.41-5
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libuuid1
2.41-5
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2010-4756MEDIUM4
libc-bin
2.41-12+deb13u3
No fix yet
2.6%
Low-Moderate Risk
Directly Exposed
CVE-2010-4756MEDIUM4
libc6
2.41-12+deb13u3
No fix yet
2.6%
Low-Moderate Risk
Directly Exposed
CVE-2026-24882LOW3.98
dirmngr
2.4.7-21+deb13u1+b4
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-24882LOW3.98
gnupg
2.4.7-21+deb13u1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-24882LOW3.98
gpg
2.4.7-21+deb13u1+b4
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-24882LOW3.98
gpg-agent
2.4.7-21+deb13u1+b4
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-24882LOW3.98
gpgconf
2.4.7-21+deb13u1+b4
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-24882LOW3.98
gpgsm
2.4.7-21+deb13u1+b4
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-48962LOW3.98
perl
5.40.1-6
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-48962LOW3.98
perl-base
5.40.1-6
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-48962LOW3.98
perl-modules-5.40
5.40.1-6
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-41992LOW3.82
gzip
1.13-1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-42497LOW3.82
perl
5.40.1-6
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-9538LOW3.82
perl
5.40.1-6
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-42497LOW3.82
perl-base
5.40.1-6
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-9538LOW3.82
perl-base
5.40.1-6
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-42497LOW3.82
perl-modules-5.40
5.40.1-6
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-9538LOW3.82
perl-modules-5.40
5.40.1-6
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2011-3374LOW3.7
libapt-pkg7.0
3.0.3
No fix yet
1.2%
Low-Moderate Risk
Directly Exposed
CVE-2005-2541LOW3.6
tar
1.35+dfsg-3.1
No fix yet
4.0%
Low-Moderate Risk
Post-Exploit
CVE-2019-1010022LOW3.53
libc-bin
2.41-12+deb13u3
No fix yet
3.2%
Low-Moderate Risk
Post-Exploit
CVE-2019-1010022LOW3.53
libc6
2.41-12+deb13u3
No fix yet
3.2%
Low-Moderate Risk
Post-Exploit
CVE-2025-15649LOW3.31
perl
5.40.1-6
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-15649LOW3.31
perl-base
5.40.1-6
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-15649LOW3.31
perl-modules-5.40
5.40.1-6
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-13221LOW3.28
libperl5.40
5.40.1-6
No fix yet
Post-Exploit
CVE-2026-13221LOW3.28
perl
5.40.1-6
No fix yet
Post-Exploit
CVE-2026-13221LOW3.28
perl-base
5.40.1-6
No fix yet
Post-Exploit
CVE-2026-13221LOW3.28
perl-modules-5.40
5.40.1-6
No fix yet
Post-Exploit
CVE-2019-1010023LOW3.17
libc-bin
2.41-12+deb13u3
No fix yet
3.1%
Low-Moderate Risk
Post-Exploit
CVE-2019-1010023LOW3.17
libc6
2.41-12+deb13u3
No fix yet
3.1%
Low-Moderate Risk
Post-Exploit
CVE-2024-7883LOW3.15
libllvm19
1:19.1.7-3+b1
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2025-14104LOW3.11
bsdutils
1:2.41-5
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-14104LOW3.11
login
1:4.16.0-2+really2.41-5
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-14104LOW3.11
mount
2.41-5
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-14104LOW3.11
util-linux
2.41-5
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-57432LOW3.02
libperl5.40
5.40.1-6
No fix yet
Post-Exploit
CVE-2026-57432LOW3.02
perl
5.40.1-6
No fix yet
Post-Exploit
CVE-2026-57432LOW3.02
perl-base
5.40.1-6
No fix yet
Post-Exploit
CVE-2026-57432LOW3.02
perl-modules-5.40
5.40.1-6
No fix yet
Post-Exploit
CVE-2026-8376LOW3
libperl5.40
5.40.1-6
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-8376LOW3
perl
5.40.1-6
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-8376LOW3
perl-base
5.40.1-6
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-8376LOW3
perl-modules-5.40
5.40.1-6
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2022-0563LOW2.8
bsdutils
1:2.41-5
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2022-0563LOW2.8
login
1:4.16.0-2+really2.41-5
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2022-0563LOW2.8
mount
2.41-5
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-5704LOW2.8
tar
1.35+dfsg-3.1
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2022-0563LOW2.8
util-linux
2.41-5
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13573LOW2.8
libllvm19
1:19.1.7-3+b1
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-13574LOW2.8
libllvm19
1:19.1.7-3+b1
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2011-4116LOW2.8
libperl5.40
5.40.1-6
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2025-70873LOW2.8
libsqlite3-0
3.46.1-7+deb13u1
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2013-4392LOW2.8
libsystemd0
257.13-1~deb13u1
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-40228LOW2.8
libsystemd0
257.13-1~deb13u1
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2013-4392LOW2.8
libudev1
257.13-1~deb13u1
No fix yet
0.5%
Theoretical Threat
Directly Exposed
CVE-2026-40228LOW2.8
libudev1
257.13-1~deb13u1
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-42496LOW2.78
libperl5.40
5.40.1-6
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2018-20796LOW2.7
libc-bin
2.41-12+deb13u3
No fix yet
5.8%
Low-Moderate Risk
Post-Exploit
CVE-2019-9192LOW2.7
libc-bin
2.41-12+deb13u3
No fix yet
2.4%
Low-Moderate Risk
Post-Exploit
CVE-2018-20796LOW2.7
libc6
2.41-12+deb13u3
No fix yet
5.8%
Low-Moderate Risk
Post-Exploit
CVE-2019-9192LOW2.7
libc6
2.41-12+deb13u3
No fix yet
2.4%
Low-Moderate Risk
Post-Exploit
CVE-2018-6829LOW2.7
libgcrypt20
1.11.0-7+deb13u1
No fix yet
1.8%
Low-Moderate Risk
Post-Exploit
CVE-2018-5709LOW2.7
libgssapi-krb5-2
1.21.3-5+deb13u1
No fix yet
2.1%
Low-Moderate Risk
Post-Exploit
CVE-2018-5709LOW2.7
libk5crypto3
1.21.3-5+deb13u1
No fix yet
2.1%
Low-Moderate Risk
Post-Exploit
CVE-2018-5709LOW2.7
libkrb5-3
1.21.3-5+deb13u1
No fix yet
2.1%
Low-Moderate Risk
Post-Exploit
CVE-2018-5709LOW2.7
libkrb5support0
1.21.3-5+deb13u1
No fix yet
2.1%
Low-Moderate Risk
Post-Exploit
CVE-2015-3276LOW2.7
libldap2
2.6.10+dfsg-1
No fix yet
5.3%
Low-Moderate Risk
Post-Exploit
CVE-2017-17740LOW2.7
libldap2
2.6.10+dfsg-1
No fix yet
7.0%
Low-Moderate Risk
Post-Exploit
CVE-2026-13595LOW2.7
bsdutils
1:2.41-5
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-3184LOW2.7
bsdutils
1:2.41-5
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13595LOW2.7
login
1:4.16.0-2+really2.41-5
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-3184LOW2.7
login
1:4.16.0-2+really2.41-5
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13595LOW2.7
mount
2.41-5
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-3184LOW2.7
mount
2.41-5
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-12087LOW2.7
perl
5.40.1-6
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-12087LOW2.7
perl-base
5.40.1-6
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-12087LOW2.7
perl-modules-5.40
5.40.1-6
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-13595LOW2.7
util-linux
2.41-5
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-3184LOW2.7
util-linux
2.41-5
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-11731LOW2.63
libxslt1.1
1.1.35-1.2+deb13u3
No fix yet
0.3%
Theoretical Threat
Directly Exposed
CVE-2026-48959LOW2.55
perl
5.40.1-6
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-48961LOW2.55
perl
5.40.1-6
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-48959LOW2.55
perl-base
5.40.1-6
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-48961LOW2.55
perl-base
5.40.1-6
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-48959LOW2.55
perl-modules-5.40
5.40.1-6
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-48961LOW2.55
perl-modules-5.40
5.40.1-6
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2007-5686LOW2.5
login.defs
1:4.17.4-2
No fix yet
0.9%
Theoretical Threat
Post-Exploit
CVE-2007-5686LOW2.5
passwd
1:4.17.4-2
No fix yet
0.9%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
bsdutils
1:2.41-5
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2017-18018LOW2.4
coreutils
9.7-3
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2025-68972LOW2.4
dirmngr
2.4.7-21+deb13u1+b4
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-68972LOW2.4
gnupg
2.4.7-21+deb13u1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-68972LOW2.4
gpg
2.4.7-21+deb13u1+b4
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-68972LOW2.4
gpg-agent
2.4.7-21+deb13u1+b4
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-68972LOW2.4
gpgconf
2.4.7-21+deb13u1+b4
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-68972LOW2.4
gpgsm
2.4.7-21+deb13u1+b4
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-41991LOW2.4
gzip
1.13-1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
login
1:4.16.0-2+really2.41-5
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
mount
2.41-5
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
util-linux
2.41-5
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-5278LOW2.24
coreutils
9.7-3
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2011-3374LOW2.22
apt
3.0.3
No fix yet
1.2%
Low-Moderate Risk
Post-Exploit
CVE-2024-56433LOW1.84
login.defs
1:4.17.4-2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2024-56433LOW1.84
passwd
1:4.17.4-2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2022-3219LOW1.68
dirmngr
2.4.7-21+deb13u1+b4
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2022-3219LOW1.68
gnupg
2.4.7-21+deb13u1
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2022-3219LOW1.68
gpg
2.4.7-21+deb13u1+b4
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2022-3219LOW1.68
gpg-agent
2.4.7-21+deb13u1+b4
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2022-3219LOW1.68
gpgconf
2.4.7-21+deb13u1+b4
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2022-3219LOW1.68
gpgsm
2.4.7-21+deb13u1+b4
No fix yet
0.3%
Theoretical Threat
Post-Exploit
CVE-2011-4116LOW1.68
perl
5.40.1-6
No fix yet
0.5%
Theoretical Threat
Post-Exploit
CVE-2011-4116LOW1.68
perl-base
5.40.1-6
No fix yet
0.5%
Theoretical Threat
Post-Exploit
CVE-2011-4116LOW1.68
perl-modules-5.40
5.40.1-6
No fix yet
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-57062LOW1.48
dirmngr
2.4.7-21+deb13u1+b4
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-57062LOW1.48
gnupg
2.4.7-21+deb13u1
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-57062LOW1.48
gpg
2.4.7-21+deb13u1+b4
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-57062LOW1.48
gpg-agent
2.4.7-21+deb13u1+b4
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-57062LOW1.48
gpgconf
2.4.7-21+deb13u1+b4
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-57062LOW1.48
gpgsm
2.4.7-21+deb13u1+b4
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-68121NONE0
stdlib
v1.24.6
fixed in 1.24.13, 1.25.7, 1.26.0-rc.3
0.8%
Theoretical Threat
Not Applicable
CVE-2019-1010022NONE0
libc-l10n
2.41-12+deb13u3
No fix yet
3.2%
Low-Moderate Risk
Not Applicable
CVE-2019-1010022NONE0
locales
2.41-12+deb13u3
No fix yet
3.2%
Low-Moderate Risk
Not Applicable
CVE-2019-1010023NONE0
libc-l10n
2.41-12+deb13u3
No fix yet
3.1%
Low-Moderate Risk
Not Applicable
CVE-2019-1010023NONE0
locales
2.41-12+deb13u3
No fix yet
3.1%
Low-Moderate Risk
Not Applicable
CVE-2026-24882NONE0
gnupg-l10n
2.4.7-21+deb13u1
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
libncursesw6
6.5+20250216-2
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
libtinfo6
6.5+20250216-2
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
ncurses-base
6.5+20250216-2
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
ncurses-bin
6.5+20250216-2
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2026-39822NONE0
stdlib
v1.24.6
fixed in 1.25.12, 1.26.5, 1.27.0-rc.2
0.2%
Theoretical Threat
Not Applicable
CVE-2018-20796NONE0
libc-l10n
2.41-12+deb13u3
No fix yet
5.8%
Low-Moderate Risk
Not Applicable
CVE-2019-9192NONE0
libc-l10n
2.41-12+deb13u3
No fix yet
2.4%
Low-Moderate Risk
Not Applicable
CVE-2018-20796NONE0
locales
2.41-12+deb13u3
No fix yet
5.8%
Low-Moderate Risk
Not Applicable
CVE-2019-9192NONE0
locales
2.41-12+deb13u3
No fix yet
2.4%
Low-Moderate Risk
Not Applicable
CVE-2025-61726NONE0
stdlib
v1.24.6
fixed in 1.24.12, 1.25.6
1.9%
Low-Moderate Risk
Not Applicable
CVE-2025-61729NONE0
stdlib
v1.24.6
fixed in 1.24.11, 1.25.5
0.5%
Theoretical Threat
Not Applicable
CVE-2026-25679NONE0
stdlib
v1.24.6
fixed in 1.25.8, 1.26.1
0.7%
Theoretical Threat
Not Applicable
CVE-2026-27145NONE0
stdlib
v1.24.6
fixed in 1.25.11, 1.26.4
0.9%
Theoretical Threat
Not Applicable
CVE-2026-32280NONE0
stdlib
v1.24.6
fixed in 1.25.9, 1.26.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-32281NONE0
stdlib
v1.24.6
fixed in 1.25.9, 1.26.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-32283NONE0
stdlib
v1.24.6
fixed in 1.25.9, 1.26.2
0.6%
Theoretical Threat
Not Applicable
CVE-2026-33811NONE0
stdlib
v1.24.6
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-33814NONE0
stdlib
v1.24.6
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-39820NONE0
stdlib
v1.24.6
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-39836NONE0
stdlib
v1.24.6
fixed in 1.25.10, 1.26.3
0.6%
Theoretical Threat
Not Applicable
CVE-2026-42499NONE0
stdlib
v1.24.6
fixed in 1.25.10, 1.26.3
0.8%
Theoretical Threat
Not Applicable
CVE-2026-42504NONE0
stdlib
v1.24.6
fixed in 1.25.11, 1.26.4
0.6%
Theoretical Threat
Not Applicable
CVE-2025-58183NONE0
stdlib
v1.24.6
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-61728NONE0
stdlib
v1.24.6
fixed in 1.24.12, 1.25.6
0.6%
Theoretical Threat
Not Applicable
CVE-2026-6238NONE0
libc-l10n
2.41-12+deb13u3
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2026-6238NONE0
locales
2.41-12+deb13u3
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2025-61727NONE0
stdlib
v1.24.6
fixed in 1.24.11, 1.25.5
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39825NONE0
stdlib
v1.24.6
fixed in 1.25.10, 1.26.3
0.4%
Theoretical Threat
Not Applicable
CVE-2026-32282NONE0
stdlib
v1.24.6
fixed in 1.25.9, 1.26.2
0.3%
Theoretical Threat
Not Applicable
CVE-2025-14104NONE0
liblastlog2-2
2.41-5
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-32289NONE0
stdlib
v1.24.6
fixed in 1.25.9, 1.26.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-5435NONE0
libc-l10n
2.41-12+deb13u3
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-5435NONE0
locales
2.41-12+deb13u3
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2022-0563NONE0
liblastlog2-2
2.41-5
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2026-32288NONE0
stdlib
v1.24.6
fixed in 1.25.9, 1.26.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-27142NONE0
stdlib
v1.24.6
fixed in 1.25.8, 1.26.1
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39823NONE0
stdlib
v1.24.6
fixed in 1.25.10, 1.26.3
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39826NONE0
stdlib
v1.24.6
fixed in 1.25.10, 1.26.3
0.4%
Theoretical Threat
Not Applicable
CVE-2019-1010024NONE0
libc-l10n
2.41-12+deb13u3
No fix yet
3.2%
Low-Moderate Risk
Not Applicable
CVE-2019-1010025NONE0
libc-l10n
2.41-12+deb13u3
No fix yet
2.3%
Low-Moderate Risk
Not Applicable
CVE-2026-13595NONE0
liblastlog2-2
2.41-5
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-3184NONE0
liblastlog2-2
2.41-5
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2019-1010024NONE0
locales
2.41-12+deb13u3
No fix yet
3.2%
Low-Moderate Risk
Not Applicable
CVE-2019-1010025NONE0
locales
2.41-12+deb13u3
No fix yet
2.3%
Low-Moderate Risk
Not Applicable
CVE-2025-47912NONE0
stdlib
v1.24.6
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-58185NONE0
stdlib
v1.24.6
fixed in 1.24.8, 1.25.2
0.5%
Theoretical Threat
Not Applicable
CVE-2025-58187NONE0
stdlib
v1.24.6
fixed in 1.24.9, 1.25.3
0.4%
Theoretical Threat
Not Applicable
CVE-2025-58188NONE0
stdlib
v1.24.6
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-58189NONE0
stdlib
v1.24.6
fixed in 1.24.8, 1.25.2
0.4%
Theoretical Threat
Not Applicable
CVE-2025-61723NONE0
stdlib
v1.24.6
fixed in 1.24.8, 1.25.2
0.6%
Theoretical Threat
Not Applicable
CVE-2025-61724NONE0
stdlib
v1.24.6
fixed in 1.24.8, 1.25.2
0.5%
Theoretical Threat
Not Applicable
CVE-2025-61725NONE0
stdlib
v1.24.6
fixed in 1.24.8, 1.25.2
0.6%
Theoretical Threat
Not Applicable
CVE-2025-61730NONE0
stdlib
v1.24.6
fixed in 1.24.12, 1.25.6
0.3%
Theoretical Threat
Not Applicable
CVE-2026-42505NONE0
stdlib
v1.24.6
fixed in 1.25.12, 1.26.5, 1.27.0-rc.2
0.4%
Theoretical Threat
Not Applicable
CVE-2026-42507NONE0
stdlib
v1.24.6
fixed in 1.25.11, 1.26.4
0.4%
Theoretical Threat
Not Applicable
CVE-2025-58186NONE0
stdlib
v1.24.6
fixed in 1.24.8, 1.25.2
0.5%
Theoretical Threat
Not Applicable
CVE-2026-5450NONE0
libc-l10n
2.41-12+deb13u3
No fix yet
0.5%
Theoretical Threat
Not Applicable
CVE-2026-5928NONE0
libc-l10n
2.41-12+deb13u3
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2026-5450NONE0
locales
2.41-12+deb13u3
No fix yet
0.5%
Theoretical Threat
Not Applicable
CVE-2026-5928NONE0
locales
2.41-12+deb13u3
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2025-68972NONE0
gnupg-l10n
2.4.7-21+deb13u1
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-27456NONE0
liblastlog2-2
2.41-5
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2010-4756NONE0
libc-l10n
2.41-12+deb13u3
No fix yet
2.6%
Low-Moderate Risk
Not Applicable
CVE-2010-4756NONE0
locales
2.41-12+deb13u3
No fix yet
2.6%
Low-Moderate Risk
Not Applicable
CVE-2022-3219NONE0
gnupg-l10n
2.4.7-21+deb13u1
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2025-6141NONE0
libncursesw6
6.5+20250216-2
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-6141NONE0
libtinfo6
6.5+20250216-2
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-6141NONE0
ncurses-base
6.5+20250216-2
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-6141NONE0
ncurses-bin
6.5+20250216-2
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-57062NONE0
gnupg-l10n
2.4.7-21+deb13u1
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-27139NONE0
stdlib
v1.24.6
fixed in 1.25.8, 1.26.1
0.2%
Theoretical Threat
Not Applicable
TEMP-0841856-B18BAFNONE0
bash
5.2.37-2+b9
No fix yet
Not Applicable
CVE-2026-53615NONE0
bsdutils
1:2.41-5
No fix yet
Not Applicable
CVE-2026-53612NONE0
bsdutils
1:2.41-5
No fix yet
Not Applicable
CVE-2026-53613NONE0
bsdutils
1:2.41-5
No fix yet
Not Applicable
CVE-2026-53614NONE0
bsdutils
1:2.41-5
No fix yet
Not Applicable
CVE-2026-53615NONE0
libblkid1
2.41-5
No fix yet
Not Applicable
CVE-2026-53612NONE0
libblkid1
2.41-5
No fix yet
Not Applicable
CVE-2026-53613NONE0
libblkid1
2.41-5
No fix yet
Not Applicable
CVE-2026-53614NONE0
libblkid1
2.41-5
No fix yet
Not Applicable
CVE-2026-53615NONE0
liblastlog2-2
2.41-5
No fix yet
Not Applicable
CVE-2026-53612NONE0
liblastlog2-2
2.41-5
No fix yet
Not Applicable
CVE-2026-53613NONE0
liblastlog2-2
2.41-5
No fix yet
Not Applicable
CVE-2026-53614NONE0
liblastlog2-2
2.41-5
No fix yet
Not Applicable
CVE-2026-53615NONE0
libmount1
2.41-5
No fix yet
Not Applicable
CVE-2026-53612NONE0
libmount1
2.41-5
No fix yet
Not Applicable
CVE-2026-53613NONE0
libmount1
2.41-5
No fix yet
Not Applicable
CVE-2026-53614NONE0
libmount1
2.41-5
No fix yet
Not Applicable
CVE-2026-7010NONE0
libperl5.40
5.40.1-6
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-57433NONE0
libperl5.40
5.40.1-6
No fix yet
Not Applicable
CVE-2026-7017NONE0
libperl5.40
5.40.1-6
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2026-53615NONE0
libsmartcols1
2.41-5
No fix yet
Not Applicable
CVE-2026-53612NONE0
libsmartcols1
2.41-5
No fix yet
Not Applicable
CVE-2026-53613NONE0
libsmartcols1
2.41-5
No fix yet
Not Applicable
CVE-2026-53614NONE0
libsmartcols1
2.41-5
No fix yet
Not Applicable
CVE-2026-11822NONE0
libsqlite3-0
3.46.1-7+deb13u1
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-11824NONE0
libsqlite3-0
3.46.1-7+deb13u1
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-50812NONE0
libsqlite3-0
3.46.1-7+deb13u1
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-50813NONE0
libsqlite3-0
3.46.1-7+deb13u1
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-53615NONE0
libuuid1
2.41-5
No fix yet
Not Applicable
CVE-2026-53612NONE0
libuuid1
2.41-5
No fix yet
Not Applicable
CVE-2026-53613NONE0
libuuid1
2.41-5
No fix yet
Not Applicable
CVE-2026-53614NONE0
libuuid1
2.41-5
No fix yet
Not Applicable
CVE-2026-53615NONE0
login
1:4.16.0-2+really2.41-5
No fix yet
Not Applicable
CVE-2026-53612NONE0
login
1:4.16.0-2+really2.41-5
No fix yet
Not Applicable
CVE-2026-53613NONE0
login
1:4.16.0-2+really2.41-5
No fix yet
Not Applicable
CVE-2026-53614NONE0
login
1:4.16.0-2+really2.41-5
No fix yet
Not Applicable
TEMP-0628843-DBAD28NONE0
login.defs
1:4.17.4-2
No fix yet
Not Applicable
CVE-2026-53615NONE0
mount
2.41-5
No fix yet
Not Applicable
CVE-2026-53612NONE0
mount
2.41-5
No fix yet
Not Applicable
CVE-2026-53613NONE0
mount
2.41-5
No fix yet
Not Applicable
CVE-2026-53614NONE0
mount
2.41-5
No fix yet
Not Applicable
TEMP-0628843-DBAD28NONE0
passwd
1:4.17.4-2
No fix yet
Not Applicable
CVE-2026-7010NONE0
perl
5.40.1-6
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-57433NONE0
perl
5.40.1-6
No fix yet
Not Applicable
CVE-2026-7017NONE0
perl
5.40.1-6
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2026-7010NONE0
perl-base
5.40.1-6
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-57433NONE0
perl-base
5.40.1-6
No fix yet
Not Applicable
CVE-2026-7017NONE0
perl-base
5.40.1-6
No fix yet
0.3%
Theoretical Threat
Not Applicable
CVE-2026-7010NONE0
perl-modules-5.40
5.40.1-6
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-57433NONE0
perl-modules-5.40
5.40.1-6
No fix yet
Not Applicable
CVE-2026-7017NONE0
perl-modules-5.40
5.40.1-6
No fix yet
0.3%
Theoretical Threat
Not Applicable
TEMP-0517018-A83CE6NONE0
sysvinit-utils
3.14-4
No fix yet
Not Applicable
TEMP-0290435-0B57B5NONE0
tar
1.35+dfsg-3.1
No fix yet
Not Applicable
CVE-2026-53615NONE0
util-linux
2.41-5
No fix yet
Not Applicable
CVE-2026-53612NONE0
util-linux
2.41-5
No fix yet
Not Applicable
CVE-2026-53613NONE0
util-linux
2.41-5
No fix yet
Not Applicable
CVE-2026-53614NONE0
util-linux
2.41-5
No fix yet
Not Applicable
CVE-2026-39824NONE0
golang.org/x/sys
v0.1.0
fixed in 0.44.0
0.1%
Theoretical Threat
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.