Last scanned:
This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. An attacker could cause denial of service via crafted network packets (CVE-2026-41989, CVE-2026-34183) or bypass integrity checks in CMS processing (CVE-2026-34182). These vulnerabilities are present in packages like libgcrypt and OpenSSL; their exploitability in derived images depends on network exposure and feature usage. Disabling unused OpenSSL modules (e.g., QUIC or CMS) can eliminate certain risks where those features are not required. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.
| CVE ID | Adjusted Severity | Package | Exploit Probability | Risk Context |
|---|---|---|---|---|
| CVE-2026-41989 | MEDIUM6.38 | libgcrypt20 1.11.0-7build1 fixed in 1.11.0-7ubuntu0.1 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-34183 | MEDIUM6.38 | libssl3t64 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.4 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-34183 | MEDIUM6.38 | openssl-provider-legacy 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.4 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-34182 | MEDIUM6.29 | libssl3t64 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.4 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-69419 | MEDIUM6.29 | libssl3t64 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-34182 | MEDIUM6.29 | openssl-provider-legacy 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.4 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-69419 | MEDIUM6.29 | openssl-provider-legacy 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-4878 | MEDIUM5.95 | libcap2 1:2.75-7ubuntu2 fixed in 1:2.75-7ubuntu2.2 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2024-2236 | MEDIUM5.9 | libgcrypt20 1.11.0-7build1 No fix yet | 1.1% Low-Moderate Risk | Directly Exposed |
| CVE-2026-4437 | MEDIUM5.52 | libc-bin 2.42-0ubuntu3 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-6238 | MEDIUM5.52 | libc-bin 2.42-0ubuntu3 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-4437 | MEDIUM5.52 | libc6 2.42-0ubuntu3 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-6238 | MEDIUM5.52 | libc6 2.42-0ubuntu3 No fix yet | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-2673 | MEDIUM5.52 | libssl3t64 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.3 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-2673 | MEDIUM5.52 | openssl-provider-legacy 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.3 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-40225 | MEDIUM5.44 | libsystemd0 257.9-0ubuntu2 fixed in 257.9-0ubuntu2.3 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-40226 | MEDIUM5.44 | libsystemd0 257.9-0ubuntu2 fixed in 257.9-0ubuntu2.5 | <0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-34181 | MEDIUM5.35 | libssl3t64 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.4 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-42768 | MEDIUM5.35 | libssl3t64 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.4 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-34181 | MEDIUM5.35 | openssl-provider-legacy 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.4 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-42768 | MEDIUM5.35 | openssl-provider-legacy 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.4 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-11187 | MEDIUM5.18 | libssl3t64 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2025-11187 | MEDIUM5.18 | openssl-provider-legacy 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2025-15281 | MEDIUM5.02 | libc-bin 2.42-0ubuntu3 fixed in 2.42-0ubuntu3.1 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-5435 | MEDIUM5.02 | libc-bin 2.42-0ubuntu3 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-15281 | MEDIUM5.02 | libc6 2.42-0ubuntu3 fixed in 2.42-0ubuntu3.1 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-5435 | MEDIUM5.02 | libc6 2.42-0ubuntu3 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-31790 | MEDIUM5.02 | libssl3t64 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.3 | 1.0% Theoretical Threat | Directly Exposed |
| CVE-2026-42764 | MEDIUM5.02 | libssl3t64 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.4 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2025-15468 | MEDIUM5.02 | libssl3t64 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2025-66199 | MEDIUM5.02 | libssl3t64 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-69420 | MEDIUM5.02 | libssl3t64 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-22796 | MEDIUM5.02 | libssl3t64 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-42769 | MEDIUM5.02 | libssl3t64 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.4 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-42770 | MEDIUM5.02 | libssl3t64 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.4 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-9076 | MEDIUM5.02 | libssl3t64 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.4 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-31790 | MEDIUM5.02 | openssl-provider-legacy 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.3 | 1.0% Theoretical Threat | Directly Exposed |
| CVE-2026-42764 | MEDIUM5.02 | openssl-provider-legacy 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.4 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2025-15468 | MEDIUM5.02 | openssl-provider-legacy 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3 | 0.7% Theoretical Threat | Directly Exposed |
| CVE-2025-66199 | MEDIUM5.02 | openssl-provider-legacy 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-69420 | MEDIUM5.02 | openssl-provider-legacy 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3 | 0.8% Theoretical Threat | Directly Exposed |
| CVE-2026-22796 | MEDIUM5.02 | openssl-provider-legacy 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-42769 | MEDIUM5.02 | openssl-provider-legacy 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.4 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-42770 | MEDIUM5.02 | openssl-provider-legacy 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.4 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-9076 | MEDIUM5.02 | openssl-provider-legacy 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.4 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2025-15469 | MEDIUM4.67 | libssl3t64 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-22795 | MEDIUM4.67 | libssl3t64 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-7383 | MEDIUM4.67 | libssl3t64 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.4 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2025-15469 | MEDIUM4.67 | openssl-provider-legacy 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-22795 | MEDIUM4.67 | openssl-provider-legacy 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-7383 | MEDIUM4.67 | openssl-provider-legacy 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.4 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-27171 | MEDIUM4.67 | zlib1g 1:1.3.dfsg+really1.3.1-1ubuntu2 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-0915 | MEDIUM4.5 | libc-bin 2.42-0ubuntu3 fixed in 2.42-0ubuntu3.1 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-4046 | MEDIUM4.5 | libc-bin 2.42-0ubuntu3 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-0915 | MEDIUM4.5 | libc6 2.42-0ubuntu3 fixed in 2.42-0ubuntu3.1 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-4046 | MEDIUM4.5 | libc6 2.42-0ubuntu3 No fix yet | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-34743 | MEDIUM4.5 | liblzma5 5.8.1-1build2 fixed in 5.8.1-1ubuntu0.1 | 0.4% Theoretical Threat | Directly Exposed |
| CVE-2026-42766 | MEDIUM4.5 | libssl3t64 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.4 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-42767 | MEDIUM4.5 | libssl3t64 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.4 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-42766 | MEDIUM4.5 | openssl-provider-legacy 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.4 | 0.6% Theoretical Threat | Directly Exposed |
| CVE-2026-42767 | MEDIUM4.5 | openssl-provider-legacy 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.4 | 0.3% Theoretical Threat | Directly Exposed |
| CVE-2026-34180 | MEDIUM4.25 | libssl3t64 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.4 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2026-34180 | MEDIUM4.25 | openssl-provider-legacy 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.4 | 0.5% Theoretical Threat | Directly Exposed |
| CVE-2025-15467 | MEDIUM4.06 | libssl3t64 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3 | 47.6% High Exploitation Risk | Post-Exploit |
| CVE-2025-15467 | MEDIUM4.06 | openssl-provider-legacy 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3 | 47.6% High Exploitation Risk | Post-Exploit |
| CVE-2025-68160 | MEDIUM4 | libssl3t64 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-68160 | MEDIUM4 | openssl-provider-legacy 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-4438 | LOW3.4 | libc-bin 2.42-0ubuntu3 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-4438 | LOW3.4 | libc6 2.42-0ubuntu3 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2025-69418 | LOW3.4 | libssl3t64 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2025-69418 | LOW3.4 | openssl-provider-legacy 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3 | 0.1% Theoretical Threat | Directly Exposed |
| CVE-2026-45446 | LOW3.15 | libssl3t64 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.4 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-45446 | LOW3.15 | openssl-provider-legacy 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.4 | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-31789 | LOW3 | libssl3t64 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.3 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-31789 | LOW3 | openssl-provider-legacy 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.3 | 0.2% Theoretical Threat | Post-Exploit |
| CVE-2026-8376 | LOW3 | perl-base 5.40.1-6build1 fixed in 5.40.1-6ubuntu0.1 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-45447 | LOW2.92 | libssl3t64 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.4 | 2.7% Low-Moderate Risk | Post-Exploit |
| CVE-2026-45447 | LOW2.92 | openssl-provider-legacy 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.4 | 2.7% Low-Moderate Risk | Post-Exploit |
| CVE-2025-45582 | LOW2.86 | tar 1.35+dfsg-3.1build1 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-40228 | LOW2.8 | libsystemd0 257.9-0ubuntu2 No fix yet | 0.2% Theoretical Threat | Directly Exposed |
| CVE-2026-45445 | LOW2.78 | libssl3t64 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.4 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-45445 | LOW2.78 | openssl-provider-legacy 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.4 | 0.3% Theoretical Threat | Post-Exploit |
| CVE-2026-42496 | LOW2.78 | perl-base 5.40.1-6build1 fixed in 5.40.1-6ubuntu0.1 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-3184 | LOW2.7 | bsdutils 1:2.41-4ubuntu4.1 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-3184 | LOW2.7 | mount 2.41-4ubuntu4.1 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-3184 | LOW2.7 | util-linux 2.41-4ubuntu4.1 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-0861 | LOW2.48 | libc-bin 2.42-0ubuntu3 fixed in 2.42-0ubuntu3.1 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-0861 | LOW2.48 | libc6 2.42-0ubuntu3 fixed in 2.42-0ubuntu3.1 | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2026-28387 | LOW2.48 | libssl3t64 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.3 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-28387 | LOW2.48 | openssl-provider-legacy 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.3 | 0.6% Theoretical Threat | Post-Exploit |
| CVE-2026-27456 | LOW2.4 | bsdutils 1:2.41-4ubuntu4.1 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-27456 | LOW2.4 | mount 2.41-4ubuntu4.1 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-27456 | LOW2.4 | util-linux 2.41-4ubuntu4.1 No fix yet | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2026-29111 | LOW2.39 | libsystemd0 257.9-0ubuntu2 fixed in 257.9-0ubuntu2.3 | 0.1% Theoretical Threat | Post-Exploit |
| CVE-2025-69421 | LOW2.29 | libssl3t64 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2026-28388 | LOW2.29 | libssl3t64 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.3 | 0.9% Theoretical Threat | Post-Exploit |
| CVE-2026-28389 | LOW2.29 | libssl3t64 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.3 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2026-28390 | LOW2.29 | libssl3t64 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.3 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2025-69421 | LOW2.29 | openssl-provider-legacy 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2026-28388 | LOW2.29 | openssl-provider-legacy 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.3 | 0.9% Theoretical Threat | Post-Exploit |
| CVE-2026-28389 | LOW2.29 | openssl-provider-legacy 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.3 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2026-28390 | LOW2.29 | openssl-provider-legacy 3.5.3-1ubuntu2 fixed in 3.5.3-1ubuntu3.3 | 0.8% Theoretical Threat | Post-Exploit |
| CVE-2024-56433 | LOW1.84 | passwd 1:4.17.4-2ubuntu2 No fix yet | 0.4% Theoretical Threat | Post-Exploit |
| CVE-2025-69720 | NONE0 | libncursesw6 6.5+20250216-2build1 fixed in 6.5+20250216-2ubuntu0.1 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-69720 | NONE0 | libtinfo6 6.5+20250216-2build1 fixed in 6.5+20250216-2ubuntu0.1 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-29111 | NONE0 | libudev1 257.9-0ubuntu2 fixed in 257.9-0ubuntu2.3 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2025-69720 | NONE0 | ncurses-base 6.5+20250216-2build1 fixed in 6.5+20250216-2ubuntu0.1 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2025-69720 | NONE0 | ncurses-bin 6.5+20250216-2build1 fixed in 6.5+20250216-2ubuntu0.1 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-35349 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2025-68973 | NONE0 | gpgv 2.4.8-2ubuntu2 fixed in 2.4.8-2ubuntu2.1 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-40225 | NONE0 | libudev1 257.9-0ubuntu2 fixed in 257.9-0ubuntu2.3 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-40226 | NONE0 | libudev1 257.9-0ubuntu2 fixed in 257.9-0ubuntu2.5 | <0.1% Theoretical Threat | Not Applicable |
| CVE-2026-5958 | NONE0 | sed 4.9-2build2 fixed in 4.9-2ubuntu0.25.10.1 | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-35376 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | <0.1% Theoretical Threat | Not Applicable |
| CVE-2026-35358 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-35373 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-3184 | NONE0 | libblkid1 2.41-4ubuntu4.1 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-3184 | NONE0 | liblastlog2-2 2.41-4ubuntu4.1 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-3184 | NONE0 | libmount1 2.41-4ubuntu4.1 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-3184 | NONE0 | libsmartcols1 2.41-4ubuntu4.1 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-3184 | NONE0 | libuuid1 2.41-4ubuntu4.1 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-3184 | NONE0 | login 1:4.16.0-2+really2.41-4ubuntu4.1 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-27456 | NONE0 | libblkid1 2.41-4ubuntu4.1 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-27456 | NONE0 | liblastlog2-2 2.41-4ubuntu4.1 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-27456 | NONE0 | libmount1 2.41-4ubuntu4.1 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-27456 | NONE0 | libsmartcols1 2.41-4ubuntu4.1 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-27456 | NONE0 | libuuid1 2.41-4ubuntu4.1 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-27456 | NONE0 | login 1:4.16.0-2+really2.41-4ubuntu4.1 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-35361 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2024-56433 | NONE0 | login.defs 1:4.17.4-2ubuntu2 No fix yet | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-40228 | NONE0 | libudev1 257.9-0ubuntu2 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-2219 | NONE0 | dpkg 1.22.21ubuntu3.1 fixed in 1.22.21ubuntu3.2 | 0.4% Theoretical Threat | Not Applicable |
| CVE-2026-11822 | NONE0 | libsqlite3-0 3.46.1-8 fixed in 3.46.1-8ubuntu0.1 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-11824 | NONE0 | libsqlite3-0 3.46.1-8 fixed in 3.46.1-8ubuntu0.1 | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-35338 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-35339 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-35340 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-35341 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-35342 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-35343 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-35344 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-35345 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | <0.1% Theoretical Threat | Not Applicable |
| CVE-2026-35346 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-35347 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-35348 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-35350 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-35351 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-35352 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-35353 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-35354 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | <0.1% Theoretical Threat | Not Applicable |
| CVE-2026-35355 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-35356 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-35357 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | <0.1% Theoretical Threat | Not Applicable |
| CVE-2026-35359 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-35360 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-35362 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-35363 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-35364 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | <0.1% Theoretical Threat | Not Applicable |
| CVE-2026-35365 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-35366 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-35367 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-35368 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-35369 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-35370 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-35371 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-35372 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-35374 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | <0.1% Theoretical Threat | Not Applicable |
| CVE-2026-35375 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-35377 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-35378 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-35379 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | 0.1% Theoretical Threat | Not Applicable |
| CVE-2026-35380 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | 0.2% Theoretical Threat | Not Applicable |
| CVE-2026-35381 | NONE0 | rust-coreutils 0.2.2-0ubuntu2.1 No fix yet | 0.1% Theoretical Threat | Not Applicable |
Which CVEs are actually reachable — is the vulnerable code even linked and callable.
Live-container probes: default user, writable paths, capabilities, exposed ports.
Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.
A step-by-step hardened build plan, with parity tests proving nothing breaks.
Want to check another image? Run a full scan with the Docker Security Scanner.