Vulnerability Reportzabbix/zabbix-server-mysql:ubuntu-latest

zabbix/zabbix-server-mysql:ubuntu-latestzabbix/zabbix-server-mysql:7.4.13-ubuntuzabbix/zabbix-server-mysql:ubuntu-7.4.13
digestsha256:2b21e1f29abd245f5162113d6d3a0917dc23b871e114c3f4672c4db60cd26a4c

Executive Summary

Last scanned:

Threat Score
0/100SAFE
Reputation
TRUSTED

This image is safe for production use. The scanner found 11 exposed and 46 post-exploit vulnerabilities, but all are low severity with no practical impact on the server's attack surface. The image is signed by a verified publisher and pinned by digest, ensuring provenance and integrity. No actionable high-severity risks were identified.

Vulnerabilities

Vulnerability Log

66 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-13757MEDIUM5.27
libp11-kit0
0.26.2-2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-3731MEDIUM5.1
libssh-4
0.11.3-1ubuntu1
No fix yet
0.6%
Theoretical Threat
Directly ExposedContext importance: MEDIUM
CVE-2026-27171MEDIUM4.67
zlib1g
1:1.3.dfsg+really1.3.1-1ubuntu3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libblkid1
2.41.3-3ubuntu2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libmount1
2.41.3-3ubuntu2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libsmartcols1
2.41.3-3ubuntu2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2026-27456MEDIUM4
libuuid1
2.41.3-3ubuntu2
No fix yet
0.1%
Theoretical Threat
Directly Exposed
CVE-2019-20633LOW2.8
patch
2.8-2build1
No fix yet
1.0%
Theoretical Threat
Post-Exploit
CVE-2021-45261LOW2.8
patch
2.8-2build1
No fix yet
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-35373LOW2.8
rust-coreutils
0.8.0-0ubuntu3
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-5704LOW2.8
tar
1.35+dfsg-4ubuntu0.2
fixed in 1.35+dfsg-4ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-40228LOW2.8
libsystemd0
259.5-0ubuntu3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2026-40228LOW2.8
libudev1
259.5-0ubuntu3
No fix yet
0.2%
Theoretical Threat
Directly Exposed
CVE-2018-6952LOW2.7
patch
2.8-2build1
No fix yet
8.2%
Low-Moderate Risk
Post-Exploit
CVE-2026-3184LOW2.7
bsdutils
1:2.41.3-3ubuntu2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-3184LOW2.7
mount
2.41.3-3ubuntu2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-3184LOW2.7
util-linux
2.41.3-3ubuntu2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-39821LOW2.51
golang.org/x/net
v0.40.0
fixed in 0.55.0
0.7%
Theoretical Threat
Post-Exploit
CVE-2026-25681LOW2.48
golang.org/x/net
v0.40.0
fixed in 0.55.0
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-27136LOW2.48
golang.org/x/net
v0.40.0
fixed in 0.55.0
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
bsdutils
1:2.41.3-3ubuntu2
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
mount
2.41.3-3ubuntu2
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
util-linux
2.41.3-3ubuntu2
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-33814LOW2.29
golang.org/x/net
v0.40.0
fixed in 0.53.0
0.8%
Theoretical Threat
Post-Exploit
CVE-2021-31879LOW2.2
wget
1.25.0-2ubuntu4.3
No fix yet
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2024-2236LOW2.12
libgcrypt20
1.12.0-2ubuntu1
No fix yet
1.1%
Low-Moderate Risk
Post-Exploit
CVE-2026-25680LOW1.99
golang.org/x/net
v0.40.0
fixed in 0.55.0
0.3%
Theoretical Threat
Post-Exploit
CVE-2026-42502LOW1.87
golang.org/x/net
v0.40.0
fixed in 0.55.0
0.2%
Theoretical Threat
Post-Exploit
CVE-2024-56433LOW1.84
passwd
1:4.17.4-2ubuntu3
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-42506LOW1.65
golang.org/x/net
v0.40.0
fixed in 0.55.0
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-3184LOW1.62
libblkid1
2.41.3-3ubuntu2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-3184LOW1.62
libmount1
2.41.3-3ubuntu2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-3184LOW1.62
libsmartcols1
2.41.3-3ubuntu2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-3184LOW1.62
libuuid1
2.41.3-3ubuntu2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-47911LOW1.62
golang.org/x/net
v0.40.0
fixed in 0.45.0
0.5%
Theoretical Threat
Post-Exploit
CVE-2025-58190LOW1.62
golang.org/x/net
v0.40.0
fixed in 0.45.0
0.5%
Theoretical Threat
Post-Exploit
CVE-2026-39822NONE0
stdlib
v1.26.4
fixed in 1.25.12, 1.26.5, 1.27.0-rc.2
0.2%
Theoretical Threat
Not Applicable
CVE-2026-3184NONE0
login
1:4.16.0-2+really2.41.3-3ubuntu2
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2026-42505NONE0
stdlib
v1.26.4
fixed in 1.25.12, 1.26.5, 1.27.0-rc.2
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-modules
1.7.0-5ubuntu3
fixed in 1.7.0-5ubuntu3.1
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-modules-bin
1.7.0-5ubuntu3
fixed in 1.7.0-5ubuntu3.1
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-runtime
1.7.0-5ubuntu3
fixed in 1.7.0-5ubuntu3.1
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam0g
1.7.0-5ubuntu3
fixed in 1.7.0-5ubuntu3.1
0.3%
Theoretical Threat
Not Applicable
CVE-2026-27456NONE0
login
1:4.16.0-2+really2.41.3-3ubuntu2
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2024-56433NONE0
login.defs
1:4.17.4-2ubuntu3
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2026-35341NONE0
rust-coreutils
0.8.0-0ubuntu3
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-35344NONE0
rust-coreutils
0.8.0-0ubuntu3
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-35345NONE0
rust-coreutils
0.8.0-0ubuntu3
No fix yet
<0.1%
Theoretical Threat
Not Applicable
CVE-2026-35348NONE0
rust-coreutils
0.8.0-0ubuntu3
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-35350NONE0
rust-coreutils
0.8.0-0ubuntu3
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-35351NONE0
rust-coreutils
0.8.0-0ubuntu3
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-35352NONE0
rust-coreutils
0.8.0-0ubuntu3
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-35354NONE0
rust-coreutils
0.8.0-0ubuntu3
No fix yet
<0.1%
Theoretical Threat
Not Applicable
CVE-2026-35357NONE0
rust-coreutils
0.8.0-0ubuntu3
No fix yet
<0.1%
Theoretical Threat
Not Applicable
CVE-2026-35359NONE0
rust-coreutils
0.8.0-0ubuntu3
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-35360NONE0
rust-coreutils
0.8.0-0ubuntu3
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-35363NONE0
rust-coreutils
0.8.0-0ubuntu3
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-35364NONE0
rust-coreutils
0.8.0-0ubuntu3
No fix yet
<0.1%
Theoretical Threat
Not Applicable
CVE-2026-35367NONE0
rust-coreutils
0.8.0-0ubuntu3
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-35368NONE0
rust-coreutils
0.8.0-0ubuntu3
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-35370NONE0
rust-coreutils
0.8.0-0ubuntu3
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-35371NONE0
rust-coreutils
0.8.0-0ubuntu3
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-35374NONE0
rust-coreutils
0.8.0-0ubuntu3
No fix yet
<0.1%
Theoretical Threat
Not Applicable
CVE-2026-35377NONE0
rust-coreutils
0.8.0-0ubuntu3
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-46600NONE0
golang.org/x/net
v0.40.0
fixed in 0.56.0
0.3%
Theoretical Threat
Not Applicable
CVE-2026-39824NONE0
golang.org/x/sys
v0.33.0
fixed in 0.44.0
0.1%
Theoretical Threat
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Supply chain analysis

Base-image lineage, package provenance and signatures — nothing slipped in unnoticed.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.