Last scanned:
··This image carries significant risk; production deployment is highly discouraged without strict compensating controls. If the cluster or search engine ports are reachable, an attacker could bypass access rules to reach internal endpoints, read SonarQube process memory that may contain secrets, or run code on the server through the Hazelcast flaws. Note: CVE-2026-42581 only applies if the bundled search engine's HTTP port is reachable from outside or proxied, and CVE-2026-107725 only applies if the Hazelcast cluster port is reachable and an attacker holds a low-privilege client account. Keep those ports unexposed, restrict network access to them, and remediate the affected libraries before production use.
Hardening plan for this image · 5 steps
| CVE ID | Adjusted Severity | Package | Exploit Probability | Risk Context |
|---|---|---|---|---|
| CVE-2026-42581 | HIGH7.84 | io.netty:netty-codec-http 4.1.126.Final fixed in 4.2.13.Final, 4.1.133.Final | 0.6% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-42581 | HIGH7.84 | io.netty:netty-codec-http 4.2.2.Final fixed in 4.2.13.Final, 4.1.133.Final | 0.6% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-107726 | HIGH7.04 | com.hazelcast:hazelcast 5.6.0 fixed in 5.7.0 | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-107725 | HIGH7.04 | com.hazelcast:hazelcast 5.6.0 fixed in 5.7.0 | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-41989 | MEDIUM6.9 | libgcrypt20 1.10.3-2build1 fixed in 1.10.3-2ubuntu0.1 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-33845 | MEDIUM6.9 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 2.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-33846 | MEDIUM6.9 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 1.3% Low-Moderate Risk | Directly Exposed |
| CVE-2026-3833 | MEDIUM6.9 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-42009 | MEDIUM6.9 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 1.3% Low-Moderate Risk | Directly Exposed |
| CVE-2026-42010 | MEDIUM6.9 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-42011 | MEDIUM6.9 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-42012 | MEDIUM6.9 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-42013 | MEDIUM6.9 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-5260 | MEDIUM6.9 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-88647 | MEDIUM6.9 | libgnutls30t64 3.8.3-1.1ubuntu3.5 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-88648 | MEDIUM6.9 | libgnutls30t64 3.8.3-1.1ubuntu3.5 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-40355 | MEDIUM6.9 | libgssapi-krb5-2 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-40356 | MEDIUM6.9 | libgssapi-krb5-2 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-40355 | MEDIUM6.9 | libk5crypto3 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-40356 | MEDIUM6.9 | libk5crypto3 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-40355 | MEDIUM6.9 | libkrb5-3 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-40356 | MEDIUM6.9 | libkrb5-3 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-40355 | MEDIUM6.9 | libkrb5support0 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-40356 | MEDIUM6.9 | libkrb5support0 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-27135 | MEDIUM6.9 | libnghttp2-14 1.59.0-1ubuntu0.2 fixed in 1.59.0-1ubuntu0.3 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-103111 | MEDIUM6.9 | libpcre2-8-0 10.42-4ubuntu2.1 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-86145 | MEDIUM6.9 | libpcre2-8-0 10.42-4ubuntu2.1 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-89157 | MEDIUM6.9 | libpcre2-8-0 10.42-4ubuntu2.1 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-89161 | MEDIUM6.9 | libpcre2-8-0 10.42-4ubuntu2.1 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-33416 | MEDIUM6.9 | libpng16-16t64 1.6.43-5ubuntu0.5 fixed in 1.6.43-5ubuntu0.6 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-33636 | MEDIUM6.9 | libpng16-16t64 1.6.43-5ubuntu0.5 fixed in 1.6.43-5ubuntu0.6 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-107161 | MEDIUM6.9 | libsasl2-2 2.1.28+dfsg1-5ubuntu3.1 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-107161 | MEDIUM6.9 | libsasl2-modules-db 2.1.28+dfsg1-5ubuntu3.1 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-11822 | MEDIUM6.9 | libsqlite3-0 3.45.1-1ubuntu2.5 fixed in 3.45.1-1ubuntu2.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-11824 | MEDIUM6.9 | libsqlite3-0 3.45.1-1ubuntu2.5 fixed in 3.45.1-1ubuntu2.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-59847 | MEDIUM6.9 | libssh-4 0.10.6-2ubuntu0.4 fixed in 0.10.6-2ubuntu0.5 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-59850 | MEDIUM6.9 | libssh-4 0.10.6-2ubuntu0.4 fixed in 0.10.6-2ubuntu0.5 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-16742 | MEDIUM6.9 | libsystemd0 255.4-1ubuntu8.12 fixed in 255.4-1ubuntu8.17 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-29111 | MEDIUM6.9 | libsystemd0 255.4-1ubuntu8.12 fixed in 255.4-1ubuntu8.14 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-16742 | MEDIUM6.9 | libudev1 255.4-1ubuntu8.12 fixed in 255.4-1ubuntu8.17 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-29111 | MEDIUM6.9 | libudev1 255.4-1ubuntu8.12 fixed in 255.4-1ubuntu8.14 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2025-59250 | MEDIUM6.88 | com.microsoft.sqlserver:mssql-jdbc 12.10.2 fixed in 10.2.4.jre11, 11.2.4.jre11, 12.2.1.jre11, 12.6.5.jre11, 12.8.2.jre11, 12.10.2.jre11, 13.2.1.jre11 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-19499 | MEDIUM6.8 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-19499 | MEDIUM6.8 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-42014 | MEDIUM6.6 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-4437 | MEDIUM6.5 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-6238 | MEDIUM6.5 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-4437 | MEDIUM6.5 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-6238 | MEDIUM6.5 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-89158 | MEDIUM6.5 | libpcre2-8-0 10.42-4ubuntu2.1 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-89160 | MEDIUM6.5 | libpcre2-8-0 10.42-4ubuntu2.1 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-59843 | MEDIUM6.5 | libssh-4 0.10.6-2ubuntu0.4 fixed in 0.10.6-2ubuntu0.5 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2025-48924 | MEDIUM6.5 | org.apache.commons:commons-lang3 3.17.0 fixed in 3.18.0 | 2.6% Low-Moderate Risk | Directly Exposed |
| CVE-2025-48924 | MEDIUM6.5 | org.apache.commons:commons-lang3 3.9 fixed in 3.18.0 | 2.6% Low-Moderate Risk | Directly Exposed |
| CVE-2025-68384 | MEDIUM6.5 | org.elasticsearch.plugin:x-pack-security 8.19.8 fixed in 8.19.9, 9.1.9, 9.2.3 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-54512 | MEDIUM6.48 | com.fasterxml.jackson.core:jackson-databind 2.17.3 fixed in 2.18.8, 3.1.4, 2.21.4 | 1.1% Low-Moderate Risk | Directly ExposedContext importance: MEDIUM |
| CVE-2026-54513 | MEDIUM6.48 | com.fasterxml.jackson.core:jackson-databind 2.17.3 fixed in 2.18.8, 2.21.4, 3.1.4 | 1.2% Low-Moderate Risk | Directly ExposedContext importance: MEDIUM |
| CVE-2026-54512 | MEDIUM6.48 | com.fasterxml.jackson.core:jackson-databind 2.19.2 fixed in 2.18.8, 3.1.4, 2.21.4 | 1.1% Low-Moderate Risk | Directly ExposedContext importance: MEDIUM |
| CVE-2026-54513 | MEDIUM6.48 | com.fasterxml.jackson.core:jackson-databind 2.19.2 fixed in 2.18.8, 2.21.4, 3.1.4 | 1.2% Low-Moderate Risk | Directly ExposedContext importance: MEDIUM |
| CVE-2026-54512 | MEDIUM6.48 | com.fasterxml.jackson.core:jackson-databind 2.20.1 fixed in 2.18.8, 3.1.4, 2.21.4 | 1.1% Low-Moderate Risk | Directly ExposedContext importance: MEDIUM |
| CVE-2026-54513 | MEDIUM6.48 | com.fasterxml.jackson.core:jackson-databind 2.20.1 fixed in 2.18.8, 2.21.4, 3.1.4 | 1.2% Low-Moderate Risk | Directly ExposedContext importance: MEDIUM |
| CVE-2026-54512 | MEDIUM6.48 | tools.jackson.core:jackson-databind 3.0.2 fixed in 3.1.4 | 1.1% Low-Moderate Risk | Directly ExposedContext importance: MEDIUM |
| CVE-2026-54513 | MEDIUM6.48 | tools.jackson.core:jackson-databind 3.0.2 fixed in 3.1.4 | 1.2% Low-Moderate Risk | Directly ExposedContext importance: MEDIUM |
| CVE-2026-40225 | MEDIUM6.4 | libsystemd0 255.4-1ubuntu8.12 fixed in 255.4-1ubuntu8.14 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-40226 | MEDIUM6.4 | libsystemd0 255.4-1ubuntu8.12 fixed in 255.4-1ubuntu8.16 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-40225 | MEDIUM6.4 | libudev1 255.4-1ubuntu8.12 fixed in 255.4-1ubuntu8.14 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-40226 | MEDIUM6.4 | libudev1 255.4-1ubuntu8.12 fixed in 255.4-1ubuntu8.16 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2025-7962 | MEDIUM6.38 | com.sun.mail:jakarta.mail 1.6.3 fixed in 1.6.8, 2.0.2 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2025-7962 | MEDIUM6.38 | com.sun.mail:jakarta.mail 2.0.1 fixed in 1.6.8, 2.0.2 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2026-54371 | MEDIUM6.3 | libattr1 1:2.5.2-1build1.1 fixed in 1:2.5.2-1ubuntu0.1 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-13757 | MEDIUM6.2 | libp11-kit0 0.25.3-4ubuntu2.1 fixed in 0.25.3-4ubuntu2.2 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-18938 | MEDIUM6.2 | libp11-kit0 0.25.3-4ubuntu2.1 fixed in 0.25.3-4ubuntu2.2 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-13757 | MEDIUM6.2 | p11-kit 0.25.3-4ubuntu2.1 fixed in 0.25.3-4ubuntu2.2 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-18938 | MEDIUM6.2 | p11-kit 0.25.3-4ubuntu2.1 fixed in 0.25.3-4ubuntu2.2 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-13757 | MEDIUM6.2 | p11-kit-modules 0.25.3-4ubuntu2.1 fixed in 0.25.3-4ubuntu2.2 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-18938 | MEDIUM6.2 | p11-kit-modules 0.25.3-4ubuntu2.1 fixed in 0.25.3-4ubuntu2.2 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-68497 | MEDIUM6 | com.fasterxml.jackson.core:jackson-databind 2.17.3 fixed in 2.18.10, 2.21.6, 2.22.2 | 0.6% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-91776 | MEDIUM6 | com.fasterxml.jackson.core:jackson-databind 2.17.3 fixed in 2.18.11, 2.21.7, 2.22.3 | 0.5% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-91777 | MEDIUM6 | com.fasterxml.jackson.core:jackson-databind 2.17.3 fixed in 2.21.7, 2.18.11, 2.22.3 | 0.5% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-68497 | MEDIUM6 | com.fasterxml.jackson.core:jackson-databind 2.19.2 fixed in 2.18.10, 2.21.6, 2.22.2 | 0.6% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-91776 | MEDIUM6 | com.fasterxml.jackson.core:jackson-databind 2.19.2 fixed in 2.18.11, 2.21.7, 2.22.3 | 0.5% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-91777 | MEDIUM6 | com.fasterxml.jackson.core:jackson-databind 2.19.2 fixed in 2.21.7, 2.18.11, 2.22.3 | 0.5% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-68497 | MEDIUM6 | com.fasterxml.jackson.core:jackson-databind 2.20.1 fixed in 2.18.10, 2.21.6, 2.22.2 | 0.6% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-91776 | MEDIUM6 | com.fasterxml.jackson.core:jackson-databind 2.20.1 fixed in 2.18.11, 2.21.7, 2.22.3 | 0.5% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-91777 | MEDIUM6 | com.fasterxml.jackson.core:jackson-databind 2.20.1 fixed in 2.21.7, 2.18.11, 2.22.3 | 0.5% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-42583 | MEDIUM6 | io.netty:netty-codec 4.1.126.Final fixed in 4.1.133.Final | 0.5% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-59901 | MEDIUM6 | io.netty:netty-codec 4.1.126.Final fixed in 4.1.136.Final | 0.5% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-42583 | MEDIUM6 | io.netty:netty-codec-compression 4.2.2.Final fixed in 4.2.13.Final | 0.5% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-59901 | MEDIUM6 | io.netty:netty-codec-compression 4.2.2.Final fixed in 4.2.16.Final | 0.5% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-33870 | MEDIUM6 | io.netty:netty-codec-http 4.1.126.Final fixed in 4.1.132.Final, 4.2.10.Final | 0.7% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-42587 | MEDIUM6 | io.netty:netty-codec-http 4.1.126.Final fixed in 4.2.13.Final, 4.1.133.Final | 1.0% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-55831 | MEDIUM6 | io.netty:netty-codec-http 4.1.126.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.7% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-55833 | MEDIUM6 | io.netty:netty-codec-http 4.1.126.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.7% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-56745 | MEDIUM6 | io.netty:netty-codec-http 4.1.126.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.6% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-42585 | MEDIUM6 | io.netty:netty-codec-http 4.1.126.Final fixed in 4.2.13.Final, 4.1.133.Final | 0.3% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-59898 | MEDIUM6 | io.netty:netty-codec-http 4.1.126.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-59899 | MEDIUM6 | io.netty:netty-codec-http 4.1.126.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.6% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-59903 | MEDIUM6 | io.netty:netty-codec-http 4.1.126.Final fixed in 4.2.17.Final, 4.1.137.Final | 0.3% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-33870 | MEDIUM6 | io.netty:netty-codec-http 4.2.2.Final fixed in 4.1.132.Final, 4.2.10.Final | 0.7% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-42587 | MEDIUM6 | io.netty:netty-codec-http 4.2.2.Final fixed in 4.2.13.Final, 4.1.133.Final | 1.0% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-55831 | MEDIUM6 | io.netty:netty-codec-http 4.2.2.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.7% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-55833 | MEDIUM6 | io.netty:netty-codec-http 4.2.2.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.7% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-56745 | MEDIUM6 | io.netty:netty-codec-http 4.2.2.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.6% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-42585 | MEDIUM6 | io.netty:netty-codec-http 4.2.2.Final fixed in 4.2.13.Final, 4.1.133.Final | 0.3% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-59898 | MEDIUM6 | io.netty:netty-codec-http 4.2.2.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-59899 | MEDIUM6 | io.netty:netty-codec-http 4.2.2.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.6% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-59903 | MEDIUM6 | io.netty:netty-codec-http 4.2.2.Final fixed in 4.2.17.Final, 4.1.137.Final | 0.3% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-33871 | MEDIUM6 | io.netty:netty-codec-http2 4.1.126.Final fixed in 4.1.132.Final, 4.2.11.Final | 1.3% Low-Moderate Risk | Directly ExposedContext importance: MEDIUM |
| CVE-2026-42587 | MEDIUM6 | io.netty:netty-codec-http2 4.1.126.Final fixed in 4.2.13.Final, 4.1.133.Final | 1.0% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-56819 | MEDIUM6 | io.netty:netty-codec-http2 4.1.126.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.7% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-48043 | MEDIUM6 | io.netty:netty-codec-http2 4.1.126.Final fixed in 4.1.135.Final, 4.2.15.Final | 0.8% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2025-55163 | MEDIUM6 | io.netty:netty-codec-http2 4.2.2.Final fixed in 4.2.4.Final, 4.1.124.Final | 1.1% Low-Moderate Risk | Directly ExposedContext importance: MEDIUM |
| CVE-2026-33871 | MEDIUM6 | io.netty:netty-codec-http2 4.2.2.Final fixed in 4.1.132.Final, 4.2.11.Final | 1.3% Low-Moderate Risk | Directly ExposedContext importance: MEDIUM |
| CVE-2026-42587 | MEDIUM6 | io.netty:netty-codec-http2 4.2.2.Final fixed in 4.2.13.Final, 4.1.133.Final | 1.0% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-56819 | MEDIUM6 | io.netty:netty-codec-http2 4.2.2.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.7% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-48043 | MEDIUM6 | io.netty:netty-codec-http2 4.2.2.Final fixed in 4.1.135.Final, 4.2.15.Final | 0.8% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-42577 | MEDIUM6 | io.netty:netty-transport-classes-epoll 4.2.2.Final fixed in 4.2.13.Final | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-54399 | MEDIUM6 | org.apache.httpcomponents.core5:httpcore5 5.2.5 fixed in 5.4.3, 5.5-beta2 | 0.8% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-54428 | MEDIUM6 | org.apache.httpcomponents.core5:httpcore5-h2 5.2.4 fixed in 5.4.3, 5.5-beta2 | 0.9% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-75140 | MEDIUM6 | org.jsoup:jsoup 1.21.2 fixed in 1.23.2 | 0.5% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-29062 | MEDIUM6 | tools.jackson.core:jackson-core 3.0.2 fixed in 3.1.0 | 0.6% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-68494 | MEDIUM6 | tools.jackson.core:jackson-core 3.0.2 fixed in 3.1.4 | 0.5% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-89407 | MEDIUM6 | tools.jackson.core:jackson-core 3.0.2 fixed in 3.1.7, 3.2.2 | 0.6% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-89425 | MEDIUM6 | tools.jackson.core:jackson-core 3.0.2 fixed in 3.1.7, 3.2.3 | 0.5% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| GHSA-2m67-wjpj-xhg9 | MEDIUM6 | tools.jackson.core:jackson-core 3.0.2 fixed in 3.1.1 | — | Directly ExposedContext importance: MEDIUM |
| CVE-2026-68497 | MEDIUM6 | tools.jackson.core:jackson-databind 3.0.2 fixed in 3.2.2, 3.1.6 | 0.6% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-91776 | MEDIUM6 | tools.jackson.core:jackson-databind 3.0.2 fixed in 3.1.7, 3.2.3 | 0.5% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-91777 | MEDIUM6 | tools.jackson.core:jackson-databind 3.0.2 fixed in 3.1.7, 3.2.3 | 0.5% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-5435 | MEDIUM5.9 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-6791 | MEDIUM5.9 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-77117 | MEDIUM5.9 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-80489 | MEDIUM5.9 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-5435 | MEDIUM5.9 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-6791 | MEDIUM5.9 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-77117 | MEDIUM5.9 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-80489 | MEDIUM5.9 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-67693 | MEDIUM5.9 | libgnutls30t64 3.8.3-1.1ubuntu3.5 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-89156 | MEDIUM5.9 | libpcre2-8-0 10.42-4ubuntu2.1 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-46675 | MEDIUM5.9 | libpng16-16t64 1.6.43-5ubuntu0.5 fixed in 1.6.43-5ubuntu0.7 | — | Directly Exposed |
| CVE-2026-59845 | MEDIUM5.9 | libssh-4 0.10.6-2ubuntu0.4 fixed in 0.10.6-2ubuntu0.5 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-31790 | MEDIUM5.9 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.9 | 1.0% Low-Moderate Risk | Directly Exposed |
| CVE-2026-49844 | MEDIUM5.9 | org.apache.logging.log4j:log4j-api 2.19.0 fixed in 2.25.5, 2.26.1 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-49844 | MEDIUM5.9 | org.apache.logging.log4j:log4j-api 2.25.0 fixed in 2.25.5, 2.26.1 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-49844 | MEDIUM5.9 | org.apache.logging.log4j:log4j-api 2.25.3 fixed in 2.25.5, 2.26.1 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-113730 | MEDIUM5.6 | ognl:ognl 3.4.4 fixed in 3.4.13 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-69651 | MEDIUM5.5 | libbinutils 2.42-4ubuntu2.8 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-6368 | MEDIUM5.5 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-6368 | MEDIUM5.5 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2025-69651 | MEDIUM5.5 | libctf-nobfd0 2.42-4ubuntu2.8 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-69651 | MEDIUM5.5 | libctf0 2.42-4ubuntu2.8 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-95512 | MEDIUM5.5 | libfreetype6 2.13.2+dfsg-1ubuntu0.1 fixed in 2.13.2+dfsg-1ubuntu0.2 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-69651 | MEDIUM5.5 | libgprofng0 2.42-4ubuntu2.8 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-69651 | MEDIUM5.5 | libsframe1 2.42-4ubuntu2.8 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-50812 | MEDIUM5.5 | libsqlite3-0 3.45.1-1ubuntu2.5 fixed in 3.45.1-1ubuntu2.7 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-50813 | MEDIUM5.5 | libsqlite3-0 3.45.1-1ubuntu2.5 fixed in 3.45.1-1ubuntu2.7 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-15059 | MEDIUM5.5 | libsystemd0 255.4-1ubuntu8.12 fixed in 255.4-1ubuntu8.17 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-15059 | MEDIUM5.5 | libudev1 255.4-1ubuntu8.12 fixed in 255.4-1ubuntu8.17 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-77420 | MEDIUM5.5 | org.jline:jline-reader 3.21.0 fixed in 4.3.1, 3.30.15 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-42584 | MEDIUM5.46 | io.netty:netty-codec-http 4.1.126.Final fixed in 4.2.13.Final, 4.1.133.Final | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-42584 | MEDIUM5.46 | io.netty:netty-codec-http 4.2.2.Final fixed in 4.2.13.Final, 4.1.133.Final | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-75595 | MEDIUM5.46 | io.netty:netty-handler 4.1.126.Final fixed in 4.2.17.Final, 4.1.137.Final | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-75595 | MEDIUM5.46 | io.netty:netty-handler 4.2.2.Final fixed in 4.2.17.Final, 4.1.137.Final | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-11226 | MEDIUM5.44 | ch.qos.logback:logback-core 1.5.18 fixed in 1.5.19, 1.3.16 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-58055 | MEDIUM5.4 | libnghttp2-14 1.59.0-1ubuntu0.2 fixed in 1.59.0-1ubuntu0.4 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-4046 | MEDIUM5.3 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-4046 | MEDIUM5.3 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-42015 | MEDIUM5.3 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-95184 | MEDIUM5.3 | libgnutls30t64 3.8.3-1.1ubuntu3.5 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-59848 | MEDIUM5.3 | libssh-4 0.10.6-2ubuntu0.4 fixed in 0.10.6-2ubuntu0.5 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-45292 | MEDIUM5.3 | io.opentelemetry:opentelemetry-api 1.31.0 fixed in 1.62.0 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-64607 | MEDIUM5.3 | org.apache.httpcomponents.client5:httpclient5 5.3.1 fixed in 5.6.3 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-59888 | MEDIUM5.2 | com.fasterxml.jackson.core:jackson-databind 2.17.3 fixed in 2.18.8, 2.21.4 | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-59889 | MEDIUM5.2 | com.fasterxml.jackson.core:jackson-databind 2.17.3 fixed in 2.21.5, 2.18.9, 2.22.1 | 0.3% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-59888 | MEDIUM5.2 | com.fasterxml.jackson.core:jackson-databind 2.19.2 fixed in 2.18.8, 2.21.4 | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-59889 | MEDIUM5.2 | com.fasterxml.jackson.core:jackson-databind 2.19.2 fixed in 2.21.5, 2.18.9, 2.22.1 | 0.3% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-59888 | MEDIUM5.2 | com.fasterxml.jackson.core:jackson-databind 2.20.1 fixed in 2.18.8, 2.21.4 | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-59889 | MEDIUM5.2 | com.fasterxml.jackson.core:jackson-databind 2.20.1 fixed in 2.21.5, 2.18.9, 2.22.1 | 0.3% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2025-67735 | MEDIUM5.2 | io.netty:netty-codec-http 4.1.126.Final fixed in 4.2.8.Final, 4.1.129.Final | 0.3% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-42580 | MEDIUM5.2 | io.netty:netty-codec-http 4.1.126.Final fixed in 4.2.13.Final, 4.1.133.Final | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-56746 | MEDIUM5.2 | io.netty:netty-codec-http 4.1.126.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-59921 | MEDIUM5.2 | io.netty:netty-codec-http 4.1.126.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.5% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2025-67735 | MEDIUM5.2 | io.netty:netty-codec-http 4.2.2.Final fixed in 4.2.8.Final, 4.1.129.Final | 0.3% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-42580 | MEDIUM5.2 | io.netty:netty-codec-http 4.2.2.Final fixed in 4.2.13.Final, 4.1.133.Final | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-56746 | MEDIUM5.2 | io.netty:netty-codec-http 4.2.2.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-59921 | MEDIUM5.2 | io.netty:netty-codec-http 4.2.2.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.5% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-54518 | MEDIUM5.2 | tools.jackson.core:jackson-databind 3.0.2 fixed in 3.1.4 | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-59888 | MEDIUM5.2 | tools.jackson.core:jackson-databind 3.0.2 fixed in 3.1.4 | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-59889 | MEDIUM5.2 | tools.jackson.core:jackson-databind 3.0.2 fixed in 3.1.5, 3.2.1 | 0.3% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2025-58057 | MEDIUM5.1 | io.netty:netty-codec-compression 4.2.2.Final fixed in 4.2.5.Final | 0.6% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2025-58056 | MEDIUM5.1 | io.netty:netty-codec-http 4.2.2.Final fixed in 4.1.125.Final, 4.2.5.Final | 0.7% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-5450 | MEDIUM5 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-5928 | MEDIUM5 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-5450 | MEDIUM5 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-5928 | MEDIUM5 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-95209 | MEDIUM5 | libgnutls30t64 3.8.3-1.1ubuntu3.5 No fix yet | — | Directly Exposed |
| CVE-2026-95210 | MEDIUM5 | libgnutls30t64 3.8.3-1.1ubuntu3.5 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-11850 | MEDIUM5 | libgssapi-krb5-2 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-11850 | MEDIUM5 | libk5crypto3 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-11850 | MEDIUM5 | libkrb5-3 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-11850 | MEDIUM5 | libkrb5support0 1.20.1-6ubuntu2.6 fixed in 1.20.1-6ubuntu2.7 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-39113 | MEDIUM5 | libsqlite3-0 3.45.1-1ubuntu2.5 fixed in 3.45.1-1ubuntu2.8 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-85091 | MEDIUM5 | zlib1g 1:1.3.dfsg-3.1ubuntu2.1 fixed in 1:1.3.dfsg-3.1ubuntu2.3 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-1225 | MEDIUM5 | ch.qos.logback:logback-core 1.5.18 fixed in 1.5.25 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-18374 | MEDIUM4.9 | libc-bin 2.39-0ubuntu8.7 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-18374 | MEDIUM4.9 | libc6 2.39-0ubuntu8.7 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-44249 | MEDIUM4.86 | io.netty:netty-handler 4.1.126.Final fixed in 4.2.15.Final, 4.1.135.Final | 1.0% Theoretical Threat | Directly Exposed |
| CVE-2026-44249 | MEDIUM4.86 | io.netty:netty-handler 4.2.2.Final fixed in 4.2.15.Final, 4.1.135.Final | 1.0% Theoretical Threat | Directly Exposed |
| CVE-2026-68494 | MEDIUM4.5 | com.fasterxml.jackson.core:jackson-core 2.15.0 fixed in 2.18.8, 2.21.4 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-89425 | MEDIUM4.5 | com.fasterxml.jackson.core:jackson-core 2.15.0 fixed in 2.21.7, 2.22.3, 2.18.11 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-68494 | MEDIUM4.5 | com.fasterxml.jackson.core:jackson-core 2.17.2 fixed in 2.18.8, 2.21.4 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-89407 | MEDIUM4.5 | com.fasterxml.jackson.core:jackson-core 2.17.2 fixed in 2.18.11, 2.21.7, 2.22.3 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-89425 | MEDIUM4.5 | com.fasterxml.jackson.core:jackson-core 2.17.2 fixed in 2.21.7, 2.22.3, 2.18.11 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-68494 | MEDIUM4.5 | com.fasterxml.jackson.core:jackson-core 2.17.3 fixed in 2.18.8, 2.21.4 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-89407 | MEDIUM4.5 | com.fasterxml.jackson.core:jackson-core 2.17.3 fixed in 2.18.11, 2.21.7, 2.22.3 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-89425 | MEDIUM4.5 | com.fasterxml.jackson.core:jackson-core 2.17.3 fixed in 2.21.7, 2.22.3, 2.18.11 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-68494 | MEDIUM4.5 | com.fasterxml.jackson.core:jackson-core 2.19.2 fixed in 2.18.8, 2.21.4 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-89407 | MEDIUM4.5 | com.fasterxml.jackson.core:jackson-core 2.19.2 fixed in 2.18.11, 2.21.7, 2.22.3 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-89425 | MEDIUM4.5 | com.fasterxml.jackson.core:jackson-core 2.19.2 fixed in 2.21.7, 2.22.3, 2.18.11 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-68494 | MEDIUM4.5 | com.fasterxml.jackson.core:jackson-core 2.20.1 fixed in 2.18.8, 2.21.4 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-89407 | MEDIUM4.5 | com.fasterxml.jackson.core:jackson-core 2.20.1 fixed in 2.18.11, 2.21.7, 2.22.3 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-89425 | MEDIUM4.5 | com.fasterxml.jackson.core:jackson-core 2.20.1 fixed in 2.21.7, 2.22.3, 2.18.11 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-45416 | MEDIUM4.5 | io.netty:netty-handler 4.1.126.Final fixed in 4.2.15.Final, 4.1.135.Final | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2026-50010 | MEDIUM4.5 | io.netty:netty-handler 4.1.126.Final fixed in 4.2.15.Final, 4.1.135.Final | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-75596 | MEDIUM4.5 | io.netty:netty-handler 4.1.126.Final fixed in 4.2.17.Final, 4.1.137.Final | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-45416 | MEDIUM4.5 | io.netty:netty-handler 4.2.2.Final fixed in 4.2.15.Final, 4.1.135.Final | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2026-50010 | MEDIUM4.5 | io.netty:netty-handler 4.2.2.Final fixed in 4.2.15.Final, 4.1.135.Final | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-75596 | MEDIUM4.5 | io.netty:netty-handler 4.2.2.Final fixed in 4.2.17.Final, 4.1.137.Final | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-34479 | MEDIUM4.5 | org.apache.logging.log4j:log4j-core 2.19.0 fixed in 2.25.4 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-34480 | MEDIUM4.5 | org.apache.logging.log4j:log4j-core 2.19.0 fixed in 2.25.4 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-34478 | MEDIUM4.5 | org.apache.logging.log4j:log4j-core 2.25.0 fixed in 2.25.4 | 1.0% Theoretical Threat | Directly Exposed |
| CVE-2026-34479 | MEDIUM4.5 | org.apache.logging.log4j:log4j-core 2.25.0 fixed in 2.25.4 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-34480 | MEDIUM4.5 | org.apache.logging.log4j:log4j-core 2.25.0 fixed in 2.25.4 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2025-66566 | MEDIUM4.5 | org.lz4:lz4-java 1.8.0 No fix yet | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-42198 | MEDIUM4.5 | org.postgresql:postgresql 42.7.8 fixed in 42.7.11 | 3.3% Low-Moderate Risk | Directly Exposed |
| CVE-2026-83557 | MEDIUM4.48 | com.fasterxml.jackson.core:jackson-databind 2.17.3 fixed in 2.18.10, 2.21.6, 2.22.2 | 0.7% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-83557 | MEDIUM4.48 | com.fasterxml.jackson.core:jackson-databind 2.19.2 fixed in 2.18.10, 2.21.6, 2.22.2 | 0.7% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-83557 | MEDIUM4.48 | com.fasterxml.jackson.core:jackson-databind 2.20.1 fixed in 2.18.10, 2.21.6, 2.22.2 | 0.7% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-83557 | MEDIUM4.48 | tools.jackson.core:jackson-databind 3.0.2 fixed in 3.1.6, 3.2.2 | 0.7% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-34757 | MEDIUM4.4 | libpng16-16t64 1.6.43-5ubuntu0.5 fixed in 1.6.43-5ubuntu0.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-19032 | MEDIUM4.24 | com.fasterxml.jackson.core:jackson-databind 2.17.3 fixed in 2.18.10, 2.21.6, 2.22.2 | 0.6% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-54514 | MEDIUM4.24 | com.fasterxml.jackson.core:jackson-databind 2.17.3 fixed in 2.18.8, 2.21.4, 3.1.4 | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-54515 | MEDIUM4.24 | com.fasterxml.jackson.core:jackson-databind 2.17.3 fixed in 3.1.4, 2.18.9, 2.21.5, 2.22.1 | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-77310 | MEDIUM4.24 | com.fasterxml.jackson.core:jackson-databind 2.17.3 fixed in 2.18.9, 2.21.5, 2.22.1 | 0.3% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-19032 | MEDIUM4.24 | com.fasterxml.jackson.core:jackson-databind 2.19.2 fixed in 2.18.10, 2.21.6, 2.22.2 | 0.6% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-54514 | MEDIUM4.24 | com.fasterxml.jackson.core:jackson-databind 2.19.2 fixed in 2.18.8, 2.21.4, 3.1.4 | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-54515 | MEDIUM4.24 | com.fasterxml.jackson.core:jackson-databind 2.19.2 fixed in 3.1.4, 2.18.9, 2.21.5, 2.22.1 | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-77310 | MEDIUM4.24 | com.fasterxml.jackson.core:jackson-databind 2.19.2 fixed in 2.18.9, 2.21.5, 2.22.1 | 0.3% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-19032 | MEDIUM4.24 | com.fasterxml.jackson.core:jackson-databind 2.20.1 fixed in 2.18.10, 2.21.6, 2.22.2 | 0.6% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-54514 | MEDIUM4.24 | com.fasterxml.jackson.core:jackson-databind 2.20.1 fixed in 2.18.8, 2.21.4, 3.1.4 | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-54515 | MEDIUM4.24 | com.fasterxml.jackson.core:jackson-databind 2.20.1 fixed in 3.1.4, 2.18.9, 2.21.5, 2.22.1 | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-77310 | MEDIUM4.24 | com.fasterxml.jackson.core:jackson-databind 2.20.1 fixed in 2.18.9, 2.21.5, 2.22.1 | 0.3% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-41417 | MEDIUM4.24 | io.netty:netty-codec-http 4.1.126.Final fixed in 4.1.133.Final, 4.2.13.Final | 0.3% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-50020 | MEDIUM4.24 | io.netty:netty-codec-http 4.1.126.Final fixed in 4.2.15.Final, 4.1.135.Final | 0.2% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-41417 | MEDIUM4.24 | io.netty:netty-codec-http 4.2.2.Final fixed in 4.1.133.Final, 4.2.13.Final | 0.3% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-50020 | MEDIUM4.24 | io.netty:netty-codec-http 4.2.2.Final fixed in 4.2.15.Final, 4.1.135.Final | 0.2% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-47244 | MEDIUM4.24 | io.netty:netty-codec-http2 4.1.126.Final fixed in 4.2.15.Final, 4.1.135.Final | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-50560 | MEDIUM4.24 | io.netty:netty-codec-http2 4.1.126.Final fixed in 4.2.15.Final, 4.1.135.Final | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-59900 | MEDIUM4.24 | io.netty:netty-codec-http2 4.1.126.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-47244 | MEDIUM4.24 | io.netty:netty-codec-http2 4.2.2.Final fixed in 4.2.15.Final, 4.1.135.Final | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-50560 | MEDIUM4.24 | io.netty:netty-codec-http2 4.2.2.Final fixed in 4.2.15.Final, 4.1.135.Final | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-59900 | MEDIUM4.24 | io.netty:netty-codec-http2 4.2.2.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-18401 | MEDIUM4.24 | tools.jackson.core:jackson-core 3.0.2 fixed in 3.1.0 | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-19032 | MEDIUM4.24 | tools.jackson.core:jackson-databind 3.0.2 fixed in 3.1.6, 3.2.2 | 0.6% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-54514 | MEDIUM4.24 | tools.jackson.core:jackson-databind 3.0.2 fixed in 2.21.4, 3.1.4 | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-54516 | MEDIUM4.24 | tools.jackson.core:jackson-databind 3.0.2 fixed in 3.1.4 | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-54517 | MEDIUM4.24 | tools.jackson.core:jackson-databind 3.0.2 fixed in 3.1.4 | 0.4% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-77310 | MEDIUM4.24 | tools.jackson.core:jackson-databind 3.0.2 fixed in 3.1.5, 3.2.1 | 0.3% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-106451 | MEDIUM4.2 | org.lz4:lz4-java 1.8.0 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-19542 | MEDIUM4.2 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-89092 | MEDIUM4.2 | libc-bin 2.39-0ubuntu8.7 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-19542 | MEDIUM4.2 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-89092 | MEDIUM4.2 | libc6 2.39-0ubuntu8.7 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-4878 | MEDIUM4.14 | libcap2 1:2.66-5ubuntu2.2 fixed in 1:2.66-5ubuntu2.4 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-45186 | MEDIUM4.14 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.5 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-56132 | MEDIUM4.14 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-56403 | MEDIUM4.14 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.5 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-56404 | MEDIUM4.14 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.5 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-56405 | MEDIUM4.14 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.5 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-56406 | MEDIUM4.14 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-56407 | MEDIUM4.14 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-56408 | MEDIUM4.14 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.5 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-56410 | MEDIUM4.14 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-56411 | MEDIUM4.14 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-66046 | MEDIUM4.14 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.6 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-76641 | MEDIUM4.14 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.6 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-76957 | MEDIUM4.14 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-4438 | MEDIUM4 | libc-bin 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-4438 | MEDIUM4 | libc6 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-45536 | MEDIUM4 | io.netty:netty-transport-native-epoll 4.2.2.Final fixed in 4.2.15.Final, 4.1.135.Final | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-56409 | LOW3.9 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.6 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2025-12183 | LOW3.9 | org.lz4:lz4-java 1.8.0 fixed in 1.8.1 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-59949 | LOW3.9 | org.lz4:lz4-java 1.8.0 No fix yet | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2017-13716 | LOW3.9 | libbinutils 2.42-4ubuntu2.8 No fix yet | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2026-42250 | LOW3.9 | libbz2-1.0 1.0.8-5.1build0.1 fixed in 1.0.8-5.1ubuntu0.1 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2017-13716 | LOW3.9 | libctf-nobfd0 2.42-4ubuntu2.8 No fix yet | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2017-13716 | LOW3.9 | libctf0 2.42-4ubuntu2.8 No fix yet | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2024-2236 | LOW3.9 | libgcrypt20 1.10.3-2build1 fixed in 1.10.3-2ubuntu0.2 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2017-13716 | LOW3.9 | libgprofng0 2.42-4ubuntu2.8 No fix yet | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2026-34743 | LOW3.9 | liblzma5 5.6.1+really5.4.5-1ubuntu0.2 fixed in 5.6.1+really5.4.5-1ubuntu0.3 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2017-13716 | LOW3.9 | libsframe1 2.42-4ubuntu2.8 No fix yet | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2026-59846 | LOW3.9 | libssh-4 0.10.6-2ubuntu0.4 fixed in 0.10.6-2ubuntu0.5 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-28387 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.9 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-28388 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.9 | 0.9% Theoretical Threat | Directly Exposed |
| CVE-2026-28389 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.9 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-28390 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.9 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-31789 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.9 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-34180 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 1.0% Low-Moderate Risk | Directly Exposed |
| CVE-2026-42766 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-42767 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-42770 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-54872 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.16 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-54874 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.15 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-63074 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.15 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-7383 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-75805 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.16 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-75806 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.16 | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-77696 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.16 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-9076 | LOW3.9 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2026-27171 | LOW3.9 | zlib1g 1:1.3.dfsg-3.1ubuntu2.1 fixed in 1:1.3.dfsg-3.1ubuntu2.2 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-5958 | LOW3.78 | sed 4.9-2build1 fixed in 4.9-2ubuntu0.24.04.1 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-71497 | LOW3.76 | org.jsoup:jsoup 1.21.2 fixed in 1.23.1 | 0.3% Theoretical Threat | Directly ExposedContext importance: MEDIUM |
| CVE-2026-72522 | LOW3.72 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-3832 | LOW3.7 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-5419 | LOW3.7 | libgnutls30t64 3.8.3-1.1ubuntu3.5 fixed in 3.8.3-1.1ubuntu3.6 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-35189 | LOW3.7 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.16 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-45446 | LOW3.7 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-75803 | LOW3.7 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.15 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-45674 | LOW3.6 | io.netty:netty-resolver-dns 4.1.126.Final fixed in 4.2.15.Final, 4.1.135.Final | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-47691 | LOW3.6 | io.netty:netty-resolver-dns 4.1.126.Final fixed in 4.2.15.Final, 4.1.135.Final | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-50219 | LOW3.54 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.5 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-56412 | LOW3.54 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.5 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-31790 | LOW3.54 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.9 | 1.0% Low-Moderate Risk | Post-Exploit |
| CVE-2026-34477 | LOW3.54 | org.apache.logging.log4j:log4j-core 2.19.0 fixed in 2.25.4 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-34477 | LOW3.54 | org.apache.logging.log4j:log4j-core 2.25.0 fixed in 2.25.4 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-54291 | LOW3.54 | org.postgresql:postgresql 42.7.8 fixed in 42.7.12 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-69651 | LOW3.3 | binutils 2.42-4ubuntu2.8 No fix yet | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2025-69651 | LOW3.3 | binutils-x86-64-linux-gnu 2.42-4ubuntu2.8 No fix yet | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-102473 | LOW3.3 | dash 0.5.12-6ubuntu5 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2025-66382 | LOW3.3 | libexpat1 2.6.1-2ubuntu0.4 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-32776 | LOW3.3 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.5 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-32777 | LOW3.3 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.5 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-32778 | LOW3.3 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.5 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-5704 | LOW3.3 | tar 1.35+dfsg-3build1 fixed in 1.35+dfsg-3ubuntu0.4 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2025-69647 | LOW3.3 | libbinutils 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-69648 | LOW3.3 | libbinutils 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-69652 | LOW3.3 | libbinutils 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-69647 | LOW3.3 | libctf-nobfd0 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-69648 | LOW3.3 | libctf-nobfd0 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-69652 | LOW3.3 | libctf-nobfd0 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-69647 | LOW3.3 | libctf0 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-69648 | LOW3.3 | libctf0 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-69652 | LOW3.3 | libctf0 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-69647 | LOW3.3 | libgprofng0 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-69648 | LOW3.3 | libgprofng0 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-69652 | LOW3.3 | libgprofng0 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-69647 | LOW3.3 | libsframe1 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-69648 | LOW3.3 | libsframe1 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-69652 | LOW3.3 | libsframe1 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-40228 | LOW3.3 | libsystemd0 255.4-1ubuntu8.12 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-40228 | LOW3.3 | libudev1 255.4-1ubuntu8.12 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-42579 | LOW3.28 | io.netty:netty-codec-dns 4.1.126.Final fixed in 4.2.13.Final, 4.1.133.Final | 1.0% Low-Moderate Risk | Post-Exploit |
| CVE-2026-8763 | LOW3.28 | org.bouncycastle:bc-fips 1.0.2.6 fixed in 1.0.2.7, 2.0.2, 2.1.3 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-8763 | LOW3.28 | org.bouncycastle:bcprov-jdk18on 1.79 fixed in 1.85 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-111497 | LOW3.23 | libbrotli1 1.1.0-2build2 fixed in 1.1.0-2ubuntu0.1 | 82.6% Actively Exploited | Post-Exploit |
| CVE-2026-53910 | LOW3.18 | diffutils 1:3.10-1build1 fixed in 1:3.10-1ubuntu0.1 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2025-59375 | LOW3.18 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.5 | 1.4% Low-Moderate Risk | Directly Exposed |
| CVE-2026-18401 | LOW3.18 | com.fasterxml.jackson.core:jackson-core 2.15.0 fixed in 2.21.1, 2.18.6 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-18401 | LOW3.18 | com.fasterxml.jackson.core:jackson-core 2.17.2 fixed in 2.21.1, 2.18.6 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-18401 | LOW3.18 | com.fasterxml.jackson.core:jackson-core 2.17.3 fixed in 2.21.1, 2.18.6 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-18401 | LOW3.18 | com.fasterxml.jackson.core:jackson-core 2.19.2 fixed in 2.21.1, 2.18.6 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-18401 | LOW3.18 | com.fasterxml.jackson.core:jackson-core 2.20.1 fixed in 2.21.1, 2.18.6 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-106450 | LOW3.18 | org.lz4:lz4-java 1.8.0 No fix yet | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-106452 | LOW3.18 | org.lz4:lz4-java 1.8.0 No fix yet | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-106453 | LOW3.18 | org.lz4:lz4-java 1.8.0 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-1152 | LOW3.15 | libbinutils 2.42-4ubuntu2.8 No fix yet | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2025-1152 | LOW3.15 | libctf-nobfd0 2.42-4ubuntu2.8 No fix yet | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2025-1152 | LOW3.15 | libctf0 2.42-4ubuntu2.8 No fix yet | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2025-1152 | LOW3.15 | libgprofng0 2.42-4ubuntu2.8 No fix yet | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2025-1152 | LOW3.15 | libsframe1 2.42-4ubuntu2.8 No fix yet | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-2219 | LOW3 | dpkg 1.22.6ubuntu6.5 fixed in 1.22.6ubuntu6.6 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-45447 | LOW2.92 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 4.0% Low-Moderate Risk | Post-Exploit |
| CVE-2026-45447 | LOW2.92 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 4.0% Low-Moderate Risk | Post-Exploit |
| CVE-2026-10532 | LOW2.9 | ch.qos.logback:logback-core 1.5.18 fixed in 1.5.34 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-10532 | LOW2.9 | ch.qos.logback:logback-core 1.5.26 fixed in 1.5.34 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-54411 | LOW2.88 | libpam-modules 1.5.3-5ubuntu5.5 fixed in 1.5.3-5ubuntu5.6 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-54411 | LOW2.88 | libpam-modules-bin 1.5.3-5ubuntu5.5 fixed in 1.5.3-5ubuntu5.6 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-54411 | LOW2.88 | libpam-runtime 1.5.3-5ubuntu5.5 fixed in 1.5.3-5ubuntu5.6 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-54411 | LOW2.88 | libpam0g 1.5.3-5ubuntu5.5 fixed in 1.5.3-5ubuntu5.6 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2025-68161 | LOW2.88 | org.apache.logging.log4j:log4j-core 2.19.0 fixed in 2.25.3 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2025-68161 | LOW2.88 | org.apache.logging.log4j:log4j-core 2.25.0 fixed in 2.25.3 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2025-45582 | LOW2.86 | tar 1.35+dfsg-3build1 fixed in 1.35+dfsg-3ubuntu0.2 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2025-69644 | LOW2.8 | libbinutils 2.42-4ubuntu2.8 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2025-69645 | LOW2.8 | libbinutils 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-69646 | LOW2.8 | libbinutils 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-69644 | LOW2.8 | libctf-nobfd0 2.42-4ubuntu2.8 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2025-69645 | LOW2.8 | libctf-nobfd0 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-69646 | LOW2.8 | libctf-nobfd0 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-69644 | LOW2.8 | libctf0 2.42-4ubuntu2.8 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2025-69645 | LOW2.8 | libctf0 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-69646 | LOW2.8 | libctf0 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-69644 | LOW2.8 | libgprofng0 2.42-4ubuntu2.8 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2025-69645 | LOW2.8 | libgprofng0 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-69646 | LOW2.8 | libgprofng0 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-69644 | LOW2.8 | libsframe1 2.42-4ubuntu2.8 No fix yet | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2025-69645 | LOW2.8 | libsframe1 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-69646 | LOW2.8 | libsframe1 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-73508 | LOW2.7 | io.netty:netty-codec-dns 4.1.126.Final fixed in 4.2.16.Final, 4.1.136.Final | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-42578 | LOW2.7 | io.netty:netty-handler-proxy 4.2.2.Final fixed in 4.1.133.Final, 4.2.13.Final | 1.1% Low-Moderate Risk | Post-Exploit |
| CVE-2026-13505 | LOW2.7 | org.bouncycastle:bc-fips 1.0.2.6 fixed in 1.0.2.7, 2.0.2, 2.1.3 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-13506 | LOW2.7 | org.bouncycastle:bc-fips 1.0.2.6 fixed in 1.0.2.7, 2.0.2, 2.1.3 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-5588 | LOW2.7 | org.bouncycastle:bcpkix-jdk18on 1.79 fixed in 1.84 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2025-14813 | LOW2.7 | org.bouncycastle:bcprov-jdk18on 1.79 fixed in 1.80.2, 1.81.1, 1.84 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-13506 | LOW2.7 | org.bouncycastle:bcprov-jdk18on 1.79 fixed in 1.85 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-56131 | LOW2.7 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.6 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-84782 | LOW2.66 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.16 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2026-84782 | LOW2.66 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.16 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2026-18477 | LOW2.64 | tar 1.35+dfsg-3build1 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-18508 | LOW2.64 | tar 1.35+dfsg-3build1 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-53612 | LOW2.48 | bsdutils 1:2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53613 | LOW2.48 | bsdutils 1:2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53614 | LOW2.48 | bsdutils 1:2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-53615 | LOW2.48 | bsdutils 1:2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-8925 | LOW2.48 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.10 | 1.1% Low-Moderate Risk | Post-Exploit |
| CVE-2026-8927 | LOW2.48 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.10 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-41992 | LOW2.48 | gzip 1.12-1ubuntu3.1 fixed in 1.12-1ubuntu3.2 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-53612 | LOW2.48 | libblkid1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53613 | LOW2.48 | libblkid1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53614 | LOW2.48 | libblkid1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-53615 | LOW2.48 | libblkid1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-8925 | LOW2.48 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.10 | 1.1% Low-Moderate Risk | Post-Exploit |
| CVE-2026-8927 | LOW2.48 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.10 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-53612 | LOW2.48 | libmount1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53613 | LOW2.48 | libmount1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53614 | LOW2.48 | libmount1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-53615 | LOW2.48 | libmount1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53612 | LOW2.48 | libsmartcols1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53613 | LOW2.48 | libsmartcols1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53614 | LOW2.48 | libsmartcols1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-53615 | LOW2.48 | libsmartcols1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-34182 | LOW2.48 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 1.1% Low-Moderate Risk | Post-Exploit |
| CVE-2026-45445 | LOW2.48 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2026-63072 | LOW2.48 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.15 | 0.9% Theoretical Threat | Post-Exploit |
| CVE-2026-63076 | LOW2.48 | libssl3t64 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.15 | 1.6% Low-Moderate Risk | Post-Exploit |
| CVE-2026-53612 | LOW2.48 | libuuid1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53613 | LOW2.48 | libuuid1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53614 | LOW2.48 | libuuid1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-53615 | LOW2.48 | libuuid1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53612 | LOW2.48 | mount 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53613 | LOW2.48 | mount 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53614 | LOW2.48 | mount 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-53615 | LOW2.48 | mount 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-34182 | LOW2.48 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 1.1% Low-Moderate Risk | Post-Exploit |
| CVE-2026-45445 | LOW2.48 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2026-63072 | LOW2.48 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.15 | 0.9% Theoretical Threat | Post-Exploit |
| CVE-2026-63076 | LOW2.48 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.15 | 1.6% Low-Moderate Risk | Post-Exploit |
| CVE-2026-13221 | LOW2.48 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.4 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-42496 | LOW2.48 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.3 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-42497 | LOW2.48 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.3 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-48962 | LOW2.48 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.4 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-57432 | LOW2.48 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.4 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-57433 | LOW2.48 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.4 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-8376 | LOW2.48 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.3 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-9538 | LOW2.48 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.4 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-53612 | LOW2.48 | util-linux 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53613 | LOW2.48 | util-linux 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-53614 | LOW2.48 | util-linux 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-53615 | LOW2.48 | util-linux 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-58471 | LOW2.48 | wget 1.21.4-1ubuntu4.1 fixed in 1.21.4-1ubuntu4.3 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-58472 | LOW2.48 | wget 1.21.4-1ubuntu4.1 fixed in 1.21.4-1ubuntu4.3 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-45673 | LOW2.45 | io.netty:netty-resolver-dns 4.1.126.Final fixed in 4.2.15.Final, 4.1.135.Final | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-102474 | LOW2.4 | dash 0.5.12-6ubuntu5 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-11856 | LOW2.34 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.12 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2026-5545 | LOW2.34 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.9 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-6429 | LOW2.34 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.9 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-11856 | LOW2.34 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.12 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2026-5545 | LOW2.34 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.9 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-6429 | LOW2.34 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.9 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2025-15649 | LOW2.34 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.4 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-19487 | LOW2.34 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.6 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-58469 | LOW2.34 | wget 1.21.4-1ubuntu4.1 fixed in 1.21.4-1ubuntu4.3 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-0636 | LOW2.34 | org.bouncycastle:bcprov-jdk18on 1.79 fixed in 1.84 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2017-13716 | LOW2.34 | binutils 2.42-4ubuntu2.8 No fix yet | 1.4% Low-Moderate Risk | Post-Exploit |
| CVE-2017-13716 | LOW2.34 | binutils-x86-64-linux-gnu 2.42-4ubuntu2.8 No fix yet | 1.4% Low-Moderate Risk | Post-Exploit |
| CVE-2025-69720 | LOW2.34 | libncursesw6 6.4+20240113-1ubuntu2 fixed in 6.4+20240113-1ubuntu2.1 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2025-69720 | LOW2.34 | libtinfo6 6.4+20240113-1ubuntu2 fixed in 6.4+20240113-1ubuntu2.1 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2025-69720 | LOW2.34 | ncurses-base 6.4+20240113-1ubuntu2 fixed in 6.4+20240113-1ubuntu2.1 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2025-69720 | LOW2.34 | ncurses-bin 6.4+20240113-1ubuntu2 fixed in 6.4+20240113-1ubuntu2.1 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-28387 | LOW2.34 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.9 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2026-28388 | LOW2.34 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.9 | 0.9% Theoretical Threat | Post-Exploit |
| CVE-2026-28389 | LOW2.34 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.9 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2026-28390 | LOW2.34 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.9 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2026-31789 | LOW2.34 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.9 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-34180 | LOW2.34 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 1.0% Low-Moderate Risk | Post-Exploit |
| CVE-2026-42766 | LOW2.34 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 1.1% Low-Moderate Risk | Post-Exploit |
| CVE-2026-42767 | LOW2.34 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-42770 | LOW2.34 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-54872 | LOW2.34 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.16 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-54874 | LOW2.34 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.15 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-63074 | LOW2.34 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.15 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-7383 | LOW2.34 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2026-75805 | LOW2.34 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.16 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-75806 | LOW2.34 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.16 | 1.1% Low-Moderate Risk | Post-Exploit |
| CVE-2026-77696 | LOW2.34 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.16 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-9076 | LOW2.34 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2026-41080 | LOW2.22 | libexpat1 2.6.1-2ubuntu0.4 fixed in 2.6.1-2ubuntu0.5 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-35189 | LOW2.22 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.16 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-45446 | LOW2.22 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.11 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-75803 | LOW2.22 | openssl 3.0.13-0ubuntu3.7 fixed in 3.0.13-0ubuntu3.15 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-106449 | LOW2.22 | org.lz4:lz4-java 1.8.0 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2021-31879 | LOW2.2 | wget 1.21.4-1ubuntu4.1 No fix yet | 1.1% Low-Moderate Risk | Post-Exploit |
| CVE-2026-15146 | LOW2.12 | wget 1.21.4-1ubuntu4.1 fixed in 1.21.4-1ubuntu4.4 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-15534 | LOW2.05 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2025-5278 | LOW1.99 | coreutils 9.4-3ubuntu6.1 fixed in 9.4-3ubuntu6.3 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2025-69647 | LOW1.98 | binutils 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2025-69648 | LOW1.98 | binutils 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2025-69652 | LOW1.98 | binutils 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2025-69647 | LOW1.98 | binutils-x86-64-linux-gnu 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2025-69648 | LOW1.98 | binutils-x86-64-linux-gnu 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2025-69652 | LOW1.98 | binutils-x86-64-linux-gnu 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-13595 | LOW1.91 | bsdutils 1:2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-6253 | LOW1.91 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.9 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2026-7168 | LOW1.91 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.9 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-13595 | LOW1.91 | libblkid1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-6253 | LOW1.91 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.9 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2026-7168 | LOW1.91 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.9 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-13595 | LOW1.91 | libmount1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-13595 | LOW1.91 | libsmartcols1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-13595 | LOW1.91 | libuuid1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-13595 | LOW1.91 | mount 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-12087 | LOW1.91 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.4 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-13595 | LOW1.91 | util-linux 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-58470 | LOW1.91 | wget 1.21.4-1ubuntu4.1 fixed in 1.21.4-1ubuntu4.3 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2025-1152 | LOW1.89 | binutils 2.42-4ubuntu2.8 No fix yet | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2025-1152 | LOW1.89 | binutils-x86-64-linux-gnu 2.42-4ubuntu2.8 No fix yet | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2024-56433 | LOW1.84 | login 1:4.13+dfsg1-4ubuntu3.2 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2024-56433 | LOW1.84 | passwd 1:4.13+dfsg1-4ubuntu3.2 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-48959 | LOW1.8 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.4 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-7017 | LOW1.8 | perl-base 5.38.2-3.2ubuntu0.2 fixed in 5.38.2-3.2ubuntu0.4 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-57062 | LOW1.74 | dirmngr 2.4.4-2ubuntu17.4 fixed in 2.4.4-2ubuntu17.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-57062 | LOW1.74 | gnupg-utils 2.4.4-2ubuntu17.4 fixed in 2.4.4-2ubuntu17.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-57062 | LOW1.74 | gpg 2.4.4-2ubuntu17.4 fixed in 2.4.4-2ubuntu17.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-57062 | LOW1.74 | gpg-agent 2.4.4-2ubuntu17.4 fixed in 2.4.4-2ubuntu17.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-57062 | LOW1.74 | gpgconf 2.4.4-2ubuntu17.4 fixed in 2.4.4-2ubuntu17.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-57062 | LOW1.74 | gpgsm 2.4.4-2ubuntu17.4 fixed in 2.4.4-2ubuntu17.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-57062 | LOW1.74 | gpgv 2.4.4-2ubuntu17.4 fixed in 2.4.4-2ubuntu17.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-57062 | LOW1.74 | keyboxd 2.4.4-2ubuntu17.4 fixed in 2.4.4-2ubuntu17.6 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-27456 | LOW1.69 | bsdutils 1:2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-41991 | LOW1.69 | gzip 1.12-1ubuntu3.1 fixed in 1.12-1ubuntu3.2 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-27456 | LOW1.69 | libblkid1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-27456 | LOW1.69 | libmount1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-27456 | LOW1.69 | libsmartcols1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-27456 | LOW1.69 | libuuid1 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-27456 | LOW1.69 | mount 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-27456 | LOW1.69 | util-linux 2.39.3-9ubuntu6.4 fixed in 2.39.3-9ubuntu6.6 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2025-6141 | LOW1.68 | libncursesw6 6.4+20240113-1ubuntu2 fixed in 6.4+20240113-1ubuntu2.2 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2025-6141 | LOW1.68 | libtinfo6 6.4+20240113-1ubuntu2 fixed in 6.4+20240113-1ubuntu2.2 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2025-6141 | LOW1.68 | ncurses-base 6.4+20240113-1ubuntu2 fixed in 6.4+20240113-1ubuntu2.2 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2025-6141 | LOW1.68 | ncurses-bin 6.4+20240113-1ubuntu2 fixed in 6.4+20240113-1ubuntu2.2 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2025-69644 | LOW1.68 | binutils 2.42-4ubuntu2.8 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2025-69645 | LOW1.68 | binutils 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2025-69646 | LOW1.68 | binutils 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2025-69644 | LOW1.68 | binutils-x86-64-linux-gnu 2.42-4ubuntu2.8 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2025-69645 | LOW1.68 | binutils-x86-64-linux-gnu 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2025-69646 | LOW1.68 | binutils-x86-64-linux-gnu 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-10536 | LOW1.4 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.11 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-4873 | LOW1.4 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.9 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-5773 | LOW1.4 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.9 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-6276 | LOW1.4 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.9 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-8286 | LOW1.4 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.10 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-8458 | LOW1.4 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.10 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-86409 | LOW1.4 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.16 | 1.1% Low-Moderate Risk | Post-Exploit |
| CVE-2026-86414 | LOW1.4 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.16 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2026-8924 | LOW1.4 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.10 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2026-8932 | LOW1.4 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.13 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-92388 | LOW1.4 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.16 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2026-9547 | LOW1.4 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.10 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-10536 | LOW1.4 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.11 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-4873 | LOW1.4 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.9 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-5773 | LOW1.4 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.9 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-6276 | LOW1.4 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.9 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-8286 | LOW1.4 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.10 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-8458 | LOW1.4 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.10 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-86409 | LOW1.4 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.16 | 1.1% Low-Moderate Risk | Post-Exploit |
| CVE-2026-86414 | LOW1.4 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.16 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2026-8924 | LOW1.4 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.10 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2026-8932 | LOW1.4 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.13 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-92388 | LOW1.4 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.16 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2026-9547 | LOW1.4 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.10 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-13608 | LOW1.33 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.15 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-18924 | LOW1.33 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.15 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-80230 | LOW1.33 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.15 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-87862 | LOW1.33 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.16 | 1.0% Theoretical Threat | Post-Exploit |
| CVE-2026-87863 | LOW1.33 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.16 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2026-87864 | LOW1.33 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.16 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2026-92389 | LOW1.33 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.16 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2026-92391 | LOW1.33 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.16 | 1.2% Low-Moderate Risk | Post-Exploit |
| CVE-2026-13608 | LOW1.33 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.15 | 0.5% Theoretical Threat | Post-Exploit |
| CVE-2026-18924 | LOW1.33 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.15 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-80230 | LOW1.33 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.15 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-87862 | LOW1.33 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.16 | 1.0% Theoretical Threat | Post-Exploit |
| CVE-2026-87863 | LOW1.33 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.16 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2026-87864 | LOW1.33 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.16 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2026-92389 | LOW1.33 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.16 | 0.7% Theoretical Threat | Post-Exploit |
| CVE-2026-92391 | LOW1.33 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.16 | 1.2% Low-Moderate Risk | Post-Exploit |
| CVE-2026-9828 | LOW1.2 | ch.qos.logback:logback-core 1.5.18 fixed in 1.5.33 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-9828 | LOW1.2 | ch.qos.logback:logback-core 1.5.26 fixed in 1.5.33 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-94266 | LOW1.19 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.16 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-94266 | LOW1.19 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.16 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-82209 | LOW1.12 | curl 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.15 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-82209 | LOW1.12 | libcurl4t64 8.5.0-2ubuntu10.8 fixed in 8.5.0-2ubuntu10.15 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-19499 | NONE0 | locales 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-4437 | NONE0 | locales 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-6238 | NONE0 | locales 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-5435 | NONE0 | locales 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-6791 | NONE0 | locales 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-77117 | NONE0 | locales 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-80489 | NONE0 | locales 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-69651 | NONE0 | binutils-common 2.42-4ubuntu2.8 No fix yet | 0.3% Theoretical Threat | Not Applicable |
| CVE-2026-6368 | NONE0 | locales 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-4046 | NONE0 | locales 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-5450 | NONE0 | locales 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.5% Theoretical Threat | Not Applicable |
| CVE-2026-5928 | NONE0 | locales 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-18374 | NONE0 | locales 2.39-0ubuntu8.7 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-19542 | NONE0 | locales 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.9 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-89092 | NONE0 | locales 2.39-0ubuntu8.7 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-4438 | NONE0 | locales 2.39-0ubuntu8.7 fixed in 2.39-0ubuntu8.8 | 0.3% Theoretical Threat | Not Applicable |
| CVE-2017-13716 | NONE0 | binutils-common 2.42-4ubuntu2.8 No fix yet | 1.4% Low-Moderate Risk | Not Applicable |
| CVE-2025-1152 | NONE0 | binutils-common 2.42-4ubuntu2.8 No fix yet | 0.6% Theoretical Threat | Not Applicable |
| CVE-2025-69647 | NONE0 | binutils-common 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-69648 | NONE0 | binutils-common 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-69652 | NONE0 | binutils-common 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-69644 | NONE0 | binutils-common 2.42-4ubuntu2.8 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2025-69645 | NONE0 | binutils-common 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-69646 | NONE0 | binutils-common 2.42-4ubuntu2.8 No fix yet | 0.2% Theoretical Threat | Not Applicable |
Want to check another image? Run a full scan with the Docker Security Scanner.