CVE-2026-102010
HighAdvisory
Published 28 Sept 2026In the index since 30 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.0
- base score, highest
- EPSS
- 0.002
- 14th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 2,404
- of 17,985 indexed, latest versions
- Container images
- 2,345
- deployed by those charts
- Fix available
- 1 of 14
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 2,404 of 17,985 indexed charts deploy, on 2,345 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| gcc-12deb | 12-20220319-1ubuntu1, 12.1.0-2ubuntu1~22.04, 12.2.0-14, 12.2.0-14+deb12u1+3 more | no fix listed | 1,232 |
| gcc-14deb | 14.2.0-19, 14.2.0-19+dhi2, 14.2.0-19+dhi3 | 14.2.0-19+e1 | 578 |
| gcc-10deb | 10-20200411-0ubuntu1, 10.2.0-5ubuntu1~20.04, 10.3.0-1ubuntu1~20.04, 10.5.0-1ubuntu1~20.04 | no fix listed | 295 |
| gcc-8deb | 8-20180414-1ubuntu2, 8.2.0-1ubuntu2~18.04, 8.3.0-6ubuntu1~18.04, 8.3.0-6ubuntu1~18.04.1+3 more | no fix listed | 145 |
| gcc-defaultsdeb | 4:4.8.2-1ubuntu6, 4:5.3.1-1ubuntu1, 4:7.3.0-3ubuntu2.1, 4:7.4.0-1ubuntu2.2+4 more | no fix listed | 128 |
| gcc-5deb | 5.4.0-6ubuntu1~16.04.4, 5.4.0-6ubuntu1~16.04.5, 5.4.0-6ubuntu1~16.04.9, 5.4.0-6ubuntu1~16.04.10+2 more | no fix listed | 69 |
| gccgo-6deb | 6.0.1-0ubuntu1 | no fix listed | 69 |
| gcc-9deb | 9.3.0-17ubuntu1~20.04, 9.4.0-1ubuntu1~20.04.1, 9.4.0-1ubuntu1~20.04.2, 9.5.0-6ubuntu2.1 | no fix listed | 48 |
| gcc-7deb | 7.3.0-3ubuntu1, 7.3.0-27ubuntu1~18.04, 7.4.0-1ubuntu1~18.04, 7.4.0-1ubuntu1~18.04.1+2 more | no fix listed | 38 |
| gcc-13deb | 13.2.0-23ubuntu4, 13.3.0-6ubuntu2~24.04, 13.3.0-6ubuntu2~24.04.1 | no fix listed | 22 |
| gcc-11deb | 11.2.0-19ubuntu1, 11.3.0-1ubuntu1~22.04, 11.4.0-1ubuntu1~22.04, 11.4.0-1ubuntu1~22.04.2+2 more | no fix listed | 18 |
| gcc-4.8deb | 4.8.2-19ubuntu1, 4.8.4-2ubuntu1~14.04.3, 4.8.4-2ubuntu1~14.04.4 | no fix listed | 7 |
| gccgo-4.9deb | 4.9.1-0ubuntu1, 4.9.3-0ubuntu4 | no fix listed | 7 |
| gcc-6deb | 6.5.0-2ubuntu1~18.04 | no fix listed | 1 |
- OSV records
- DEBIAN-CVE-2026-102010UBUNTU-CVE-2026-102010ECHO-e52a-f4c4-7dc8
- Trending
- Rank 9 in indexed charts, since 30 Sept 2026. See the ranking →
Charts affected
2,404 by stars
Container images carrying it
2,345 by charts deploying them
A fixed version is listed for 1 of the 14 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| opencloudeu/ | 6e8b2df6c5a4 | gcc-12 | no fix listed | 3 |
| opencsghq/ | b98600564e07 | gcc-14 | no fix listed | 3 |
| openebs/ | f6c18b0f8c8a | gcc-12 | no fix listed | 3 |
| openebs/ | 6afe2123c457 | gcc-12 | no fix listed | 3 |
| selenium/ | 02f251d48d5f | gcc-10 | no fix listed | 3 |
| sigp/ | 50f66cfebb6d | gcc-12 | no fix listed | 3 |
| timberio/ | 6c93dfe2554c | gcc-12 | no fix listed | 3 |
| tykio/ | 50b3e4f5398a | gcc-14 | no fix listed | 3 |
| vaultwarden/ | 1587c45feaa4 | gcc-14 | no fix listed | 3 |
| vaultwarden/ | ebdfe70701c6 | gcc-14 | no fix listed | 3 |
| ghcr.io/ | f65f53dd9668 | gcc-12 | no fix listed | 3 |
| ghcr.io/ | 19ebe07b4daf | gcc-12 | no fix listed | 3 |
| ghcr.io/ | 6a5594b7b32c | gcc-12 | no fix listed | 3 |
| ghcr.io/ | 34df3680db1c | gcc-12 | no fix listed | 3 |
| ghcr.io/ | 896fc7b18b1b | gcc-12 | no fix listed | 3 |
| ghcr.io/ | 0502794a4d86 | gcc-12 | no fix listed | 3 |
| ghcr.io/ | 5fa76604a81d | gcc-14 | no fix listed | 3 |
| ghcr.io/ | 673d5229df1f | gcc-12 | no fix listed | 3 |
| quay.io/ | 6545dac92173 | gcc-12 | no fix listed | 3 |
| quay.io/ | 2b6db27eaf3d | gcc-12 | no fix listed | 3 |
| quay.io/ | 39f2c6e0af38 | gcc-10 | no fix listed | 3 |
| quay.io/ | 4c3b91bebd3d | gcc-5 gccgo-6 | no fix listed no fix listed | 3 |
| quay.io/ | f296c2ec5db7 | gcc-12 | no fix listed | 3 |
| quay.io/ | 709c7da19c5a | gcc-12 | no fix listed | 3 |
| actualbudget/ | 552beab3dec8 | gcc-12 | no fix listed | 2 |
| alexandreroman/ | 4b79473442be | gcc-7 gcc-8 gcc-defaults | no fix listed no fix listed no fix listed | 2 |
| apache/ | 0116fb802786 | gcc-12 | no fix listed | 2 |
| apache/ | afa47bf1692a | gcc-10 | no fix listed | 2 |
| apache/ | 7cdfd8deec92 | gcc-12 | no fix listed | 2 |
| apache/ | 92d055a84e9e | gcc-12 | no fix listed | 2 |
| bitnamilegacy/ | 00176a47afa0 | gcc-12 | no fix listed | 2 |
| bitnamilegacy/ | 33ce23601fc9 | gcc-12 | no fix listed | 2 |
| bitnamilegacy/ | 94bc968141e7 | gcc-12 | no fix listed | 2 |
| bitnamilegacy/ | 5927ff3702df | gcc-12 | no fix listed | 2 |
| bitnami/ | 3e8d78d6682d | gcc-14 | no fix listed | 2 |
| blockstack/ | f79944317326 | gcc-12 | no fix listed | 2 |
| cagriekin/ | 6559f9b476e1 | gcc-14 | no fix listed | 2 |
| cfssl/ | c9018c2ddf0b | gcc-12 | no fix listed | 2 |
| chromedp/ | 313ed7255ae1 | gcc-14 | no fix listed | 2 |
| clickhouse/ | ed9640bfff07 | gcc-10 | no fix listed | 2 |
| csiplugin/ | 1fa83d45417f | gcc-5 gccgo-6 | no fix listed no fix listed | 2 |
| dagster/ | f02f8afd356a | gcc-14 | no fix listed | 2 |
| datagrok/ | f5876d3aebb8 | gcc-12 | no fix listed | 2 |
| dbeaver/ | 0c0985098263 | gcc-10 | no fix listed | 2 |
| deepflowce/ | bc1882f75c18 | gcc-10 | no fix listed | 2 |
| eqalpha/ | 6537505c4235 | gcc-10 | no fix listed | 2 |
| eqalpha/ | eceb1806730c | gcc-10 | no fix listed | 2 |
| fireflyiii/ | fe4ecec4c2ba | gcc-14 | no fix listed | 2 |
| fireflyiii/ | ab52bf932546 | gcc-14 | no fix listed | 2 |
| fluent/ | 6806769c10ac | gcc-14 | no fix listed | 2 |