CVE-2026-18938

Medium

Advisory

Published 7 Aug 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.2; base score, highest
EPSS: 0.001; 1st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,138; of 17,792 indexed, latest versions
Container images: 2,078; deployed by those charts
Fix available: 2 of 2; affected packages

CVE-2026-18938 affecting package p11-kit for versions less than 0.26.5-1

Carried by container images the latest versions of 2,138 of 17,792 indexed charts deploy, on 2,078 images.

Affected package	Affected versions	Fixed in	Images
p11-kitdeb	0.23.9-2, 0.23.9-2ubuntu0.1, 0.23.20-1build1, 0.23.20-1ubuntu0.1+8 more	0.23.9-2ubuntu0.1+esm1, 0.23.20-1ubuntu0.1+esm1, 0.24.0-6ubuntu0.1, 0.25.3-4ubuntu2.2+1 more	2,077
p11-kitrpm	0.25.0-1.azl3	0.26.5-1	1

OSV records: DEBIAN-CVE-2026-18938 UBUNTU-CVE-2026-18938 AZL-95481 ECHO-09a0-891c-526d
Also known as: USN-8687-1

Charts affected

2,138 by stars

Chart	Latest	Affected images	Radar Score

Container images carrying it

2,078 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ilum/marquez :0.54.0	6e1d709d41f8	p11-kit@0.24.1-2	no fix listed	2
infisical/infisical :latest :v0.165.6	02082bf13163	p11-kit@0.25.5-3	no fix listed	2
interlayhq/interbtc :latest	a66d0e35e70f	p11-kit@0.23.20-1ubuntu0.1	0.23.20-1ubuntu0.1+esm1	2
interlayhq/interbtc-clients :vault-master	c3e311de67da	p11-kit@0.23.20-1ubuntu0.1	0.23.20-1ubuntu0.1+esm1	2
iomesh/node-disk-exporter :1.8.0	f03148764f38	p11-kit@0.23.20-1ubuntu0.1	0.23.20-1ubuntu0.1+esm1	2
istio/kubectl :1.5.10	dbb7726d1bf0	p11-kit@0.23.9-2	0.23.9-2ubuntu0.1+esm1	2
istio/proxyv2 :1.18.0	757d28c24100	p11-kit@0.24.0-6build1	0.24.0-6ubuntu0.1	2
istio/proxyv2 :1.10.3	a78b7a165744	p11-kit@0.23.9-2ubuntu0.1	0.23.9-2ubuntu0.1+esm1	2
jenkins/jenkins :2.426.1-jdk11	b470bcdc4ecd	p11-kit@0.24.1-2	no fix listed	2
jenkins/jenkins :2.541.3-jdk21	c4098086090c	p11-kit@0.25.5-3	no fix listed	2
kurento/kurento-media-server :latest	03c0d34d0828	p11-kit@0.25.3-4ubuntu2.1	0.25.3-4ubuntu2.2	2
langgenius/dify-sandbox :0.2.0	09b7e8705673	p11-kit@0.24.1-2	no fix listed	2
library/buildpack-deps :curl	04907bdd423b	p11-kit@0.25.5-3	no fix listed	2
library/cassandra :3.11.6	5aa8400b4b3b	p11-kit@0.23.9-2	0.23.9-2ubuntu0.1+esm1	2
library/cassandra :4.1.3	7cbcec0086ac	p11-kit@0.24.0-6build1	0.24.0-6ubuntu0.1	2
library/elasticsearch :7.17.3	5e6ac15bf6a5	p11-kit@0.23.20-1ubuntu0.1	0.23.20-1ubuntu0.1+esm1	2
library/elasticsearch :8.19.12	89729a95066a	p11-kit@0.25.3-4ubuntu2.1	0.25.3-4ubuntu2.2	2
library/influxdb :2.7	b8d940ca9376	p11-kit@0.24.1-2	no fix listed	2
library/mariadb :10.8.3	0abf60f81588	p11-kit@0.24.0-6build1	0.24.0-6ubuntu0.1	2
library/mariadb :10.10	334b315c10e5	p11-kit@0.24.0-6build1	0.24.0-6ubuntu0.1	2
library/mariadb :12.0.2 :12.0-noble	607835cd628b	p11-kit@0.25.3-4ubuntu2.1	0.25.3-4ubuntu2.2	2
library/mariadb :11.4	611a2fcc5fa7	p11-kit@0.25.3-4ubuntu2.1	0.25.3-4ubuntu2.2	2
library/mariadb :10.6	92e50059ea0a	p11-kit@0.24.0-6build1	0.24.0-6ubuntu0.1	2
library/mariadb :11.3.2	e101f9db3191	p11-kit@0.24.0-6build1	0.24.0-6ubuntu0.1	2
library/mongo :8.0.20	098862b1339f	p11-kit@0.25.3-4ubuntu2.1	0.25.3-4ubuntu2.2	2
library/mongo :5.0	41108d183e97	p11-kit@0.23.20-1ubuntu0.1	0.23.20-1ubuntu0.1+esm1	2
library/mongo :4.2.3	58b25d51baa1	p11-kit@0.23.9-2	0.23.9-2ubuntu0.1+esm1	2
library/mongo :7.0	b6421fd6d1c5	p11-kit@0.24.0-6build1	0.24.0-6ubuntu0.1	2
library/nginx :latest	6e23479198b9	p11-kit@0.25.5-3	no fix listed	2
library/nginx :1.27.0	98f8ec75657d	p11-kit@0.24.1-2	no fix listed	2
library/nginx :1.29.4	9dd288848f44	p11-kit@0.25.5-3	no fix listed	2
library/phpmyadmin :5.2.1	6e75aa8f767c	p11-kit@0.24.1-2	no fix listed	2
library/postgres :17-bookworm	051f7b7b3abd	p11-kit@0.24.1-2	no fix listed	2
library/postgres :16.1	09f23e02d766	p11-kit@0.24.1-2	no fix listed	2
library/postgres :18.1	1090bc3a8ccf	p11-kit@0.25.5-3	no fix listed	2
library/postgres :16.2	4aea012537ed	p11-kit@0.24.1-2	no fix listed	2
library/postgres :18.0	6f3e42ad37de	p11-kit@0.25.5-3	no fix listed	2
library/postgres :16.4	e62fbf9d3e2b	p11-kit@0.24.1-2	no fix listed	2
library/python :3.7	eedf63967cdb	p11-kit@0.24.1-2	no fix listed	2
library/rabbitmq :4.1.0-management	935b3f84c1e4	p11-kit@0.25.3-4ubuntu2.1	0.25.3-4ubuntu2.2	2
library/rabbitmq :3.12.1-management	f020c06da226	p11-kit@0.24.0-6build1	0.24.0-6ubuntu0.1	2
library/rabbitmq :4.3.5-management :4-management :management	ffd1b50c522a	p11-kit@0.25.3-4ubuntu2.1	0.25.3-4ubuntu2.2	2
library/redis :7.2.3	a7cee7c8178f	p11-kit@0.24.1-2	no fix listed	2
library/redis :8.2.2	f0957bcaa75f	p11-kit@0.24.1-2	no fix listed	2
library/redmine :6.1.3-trixie	f474a901faec	p11-kit@0.25.5-3	no fix listed	2
library/wordpress :6.8.3-apache :6.8-apache	30bff39330d1	p11-kit@0.25.5-3	no fix listed	2
library/zookeeper :3.9.5	f258365d4882	p11-kit@0.24.0-6build1	0.24.0-6ubuntu0.1	2
localstack/localstack-pro :latest	4aef81c53168	p11-kit@0.25.5-3	no fix listed	2
locustio/locust :2.32.2	a0d4b88e42c1	p11-kit@0.24.1-2	no fix listed	2
louislam/uptime-kuma :2.3.2	9aeb4e51d038	p11-kit@0.24.1-2	no fix listed	2