CVE-2025-26466
MediumAdvisory
Published 18 Feb 2025In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.9
- base score, highest
- EPSS
- 0.398
- 99th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 15
- of 17,781 indexed, latest versions
- Container images
- 15
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 15 of 17,781 indexed charts deploy, on 15 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| opensshapk | 9.6_p1-r0, 9.6_p1-r1, 9.7_p1-r3, 9.7_p1-r4+1 more | 9.6_p1-r2, 9.7_p1-r5, 9.9_p2-r0 | 14 |
| opensshdeb | 1:9.6p1-3ubuntu13.3 | 1:9.6p1-3ubuntu13.8 | 1 |
- OSV records
- ALPINE-CVE-2025-26466UBUNTU-CVE-2025-26466
- Also known as
- USN-7270-1
Charts affected
15 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| ilumilumOfficialVerified publisher | 6.7.3 | 1 of 19See more | 23,228 |
| openssh-serverdjjudas21Verified publisher | 0.1.14 | 1 of 1See more | 565 |
| docker-machine-operatorappscodeVerified publisher | 2024.7.9 | 1 of 1See more | 2,220 |
| door-agentcnoVerified publisher | 3.0.15 | 2 of 15See more | 19,338 |
| borgmaticgabe565Verified publisher | 0.10.1 | 1 of 1See more | 2,438 |
| act-runnergringolitoVerified publisher | 0.2.0 | 1 of 1See more | 2,590 |
| home-assistanthelm-chart-roeiVerified publisher | 2025.3.0 | 1 of 1See more | 4,647 |
| hetzner-dyndnsitsmethemojoVerified publisher | 1.4.0 | 1 of 1See more | 1,836 |
| k8s-ssh-bastionk8s-ssh-bastion | 0.5.4 | 1 of 1See more | 3,281 |
| installerkrateo | 2.7.1 | 1 of 2See more | 3,236 |
| installer-pre-upgradekrateo | 2.7.1 | 1 of 1See more | 2,534 |
| librenmsnimbolus | 0.5.1 | 1 of 3See more | 2,293 |
| my-bloody-jenkinsodavid | 0.1.218 | 1 of 1See more | 5,826 |
| teamcitysinextraVerified publisher | 1.0.2 | 1 of 3See more | 2,429 |
| node-redthl-chartsVerified publisher | 0.1.0 | 1 of 1See more | 2,806 |
Container images carrying it
15 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| dtzar/ | 55429449408e | openssh | 9.6_p1-r2 | 2 |
| gitea/ | 6120b1165f3a | openssh | 9.7_p1-r5 | 1 |
| gitea/ | 76f516a1a8c2 | openssh | 9.7_p1-r5 | 1 |
| hashicorp/ | b77efab1a448 | openssh | 9.7_p1-r5 | 1 |
| library/ | 851f91d24121 | openssh | 9.9_p2-r0 | 1 |
| library/ | aa3df78ecf32 | openssh | 9.9_p2-r0 | 1 |
| library/ | dd43b430341a | openssh | 9.7_p1-r5 | 1 |
| librenms/ | 0920bc9117a8 | openssh | 9.6_p1-r2 | 1 |
| linuxserver/ | 53ea39d2485c | openssh | 9.7_p1-r5 | 1 |
| nodered/ | e2632a7a35dd | openssh | 9.6_p1-r2 | 1 |
| odavid/ | e7ab3bbc948e | openssh | 9.7_p1-r5 | 1 |
| ghcr.io/ | 81f6007abb4e | openssh | 9.7_p1-r5 | 1 |
| ghcr.io/ | 835b72878606 | openssh | 9.9_p2-r0 | 1 |
| ghcr.io/ | 26c51e44d932 | openssh | 9.9_p2-r0 | 1 |
| ghcr.io/ | 4d337e14c80b | openssh | 1:9.6p1-3ubuntu13.8 | 1 |