CVE-2026-18938
MediumAdvisory
Published 7 Aug 2026In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.2
- base score, highest
- EPSS
- 0.001
- 1st percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 2,154
- of 17,803 indexed, latest versions
- Container images
- 2,107
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
CVE-2026-18938 affecting package p11-kit for versions less than 0.26.5-1
Carried by container images the latest versions of 2,154 of 17,803 indexed charts deploy, on 2,107 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| p11-kitdeb | 0.23.9-2, 0.23.9-2ubuntu0.1, 0.23.20-1build1, 0.23.20-1ubuntu0.1+8 more | 0.23.9-2ubuntu0.1+esm1, 0.23.20-1ubuntu0.1+esm1, 0.24.0-6ubuntu0.1, 0.25.3-4ubuntu2.2+1 more | 2,106 |
| p11-kitrpm | 0.25.0-1.azl3 | 0.26.5-1 | 1 |
- OSV records
- DEBIAN-CVE-2026-18938UBUNTU-CVE-2026-18938AZL-95481ECHO-09a0-891c-526d
- Also known as
- USN-8687-1
Charts affected
2,154 by stars
Container images carrying it
2,107 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| public.ecr.aws/ | f74851ce31f5 | p11-kit | no fix listed | 1 |
| quay.io/ | 70fd7c00418d | p11-kit | 0.24.0-6ubuntu0.1 | 1 |
| quay.io/ | 578934444f04 | p11-kit | 0.24.0-6ubuntu0.1 | 1 |
| quay.io/ | 0deb1a1c9176 | p11-kit | no fix listed | 1 |
| quay.io/ | 5b6701d8fb31 | p11-kit | 0.24.0-6ubuntu0.1 | 1 |
| quay.io/ | 95b5cf7ba6fe | p11-kit | 0.25.3-4ubuntu2.2 | 1 |
| quay.io/ | a36ab0c0860c | p11-kit | 0.25.3-4ubuntu2.2 | 1 |
| quay.io/ | acaf37352569 | p11-kit | 0.24.0-6ubuntu0.1 | 1 |
| quay.io/ | daf2e7650d61 | p11-kit | no fix listed | 1 |
| quay.io/ | 351d6685dc6f | p11-kit | 0.24.0-6ubuntu0.1 | 1 |
| quay.io/ | 858f807ea4e2 | p11-kit | 0.25.3-4ubuntu2.2 | 1 |
| quay.io/ | cdcfab5b4466 | p11-kit | 0.25.3-4ubuntu2.2 | 1 |
| quay.io/ | 60031f396695 | p11-kit | 0.25.3-4ubuntu2.2 | 1 |
| quay.io/ | 7932d656b63f | p11-kit | 0.25.3-4ubuntu2.2 | 1 |
| quay.io/ | a9f835d1b241 | p11-kit | no fix listed | 1 |
| quay.io/ | 935f97598255 | p11-kit | no fix listed | 1 |
| quay.io/ | d9f0bec83ef0 | p11-kit | 0.24.0-6ubuntu0.1 | 1 |
| quay.io/ | a2d3a4c67b0f | p11-kit | 0.23.9-2ubuntu0.1+esm1 | 1 |
| quay.io/ | 60950ef63764 | p11-kit | 0.24.0-6ubuntu0.1 | 1 |
| quay.io/ | 93889c3d8a34 | p11-kit | 0.24.0-6ubuntu0.1 | 1 |
| quay.io/ | 2c324c9789f5 | p11-kit | no fix listed | 1 |
| quay.io/ | d78cd113b2bc | p11-kit | 0.25.3-4ubuntu2.2 | 1 |
| quay.io/ | b705e0cbe171 | p11-kit | 0.25.5-3+e2 | 1 |
| quay.io/ | 7bba7083dfa0 | p11-kit | no fix listed | 1 |
| quay.io/ | 108fbb01c3fe | p11-kit | no fix listed | 1 |
| quay.io/ | 113e372cf71b | p11-kit | no fix listed | 1 |
| quay.io/ | 92f883d09270 | p11-kit | no fix listed | 1 |
| quay.io/ | 65e1b09fc8c9 | p11-kit | no fix listed | 1 |
| quay.io/ | 2169032c5840 | p11-kit | no fix listed | 1 |
| quay.io/ | 04f1099241fc | p11-kit | no fix listed | 1 |
| quay.io/ | 3408107e5cc4 | p11-kit | 0.25.3-4ubuntu2.2 | 1 |
| quay.io/ | d8f66f4117fe | p11-kit | no fix listed | 1 |
| quay.io/ | e854423caa09 | p11-kit | no fix listed | 1 |
| quay.io/ | b406475f9f00 | p11-kit | no fix listed | 1 |
| quay.io/ | 56399619568b | p11-kit | no fix listed | 1 |
| quay.io/ | e0d9b93dbf2b | p11-kit | no fix listed | 1 |
| registry.gitlab.com/ | 166a06f73d8c | p11-kit | 0.25.3-4ubuntu2.2 | 1 |
| registry.gitlab.com/ | b6c44d969163 | p11-kit | no fix listed | 1 |
| registry.gitlab.com/ | 9bd5d93aaff7 | p11-kit | no fix listed | 1 |
| registry.gitlab.com/ | b7984253b128 | p11-kit | no fix listed | 1 |
| registry.gitlab.com/ | 564718e28931 | p11-kit | no fix listed | 1 |
| registry.gitlab.com/ | df842ed79211 | p11-kit | no fix listed | 1 |
| registry.gitlab.com/ | 66353ce9bf98 | p11-kit | no fix listed | 1 |
| registry.gitlab.com/ | 0e3cd8c7776d | p11-kit | no fix listed | 1 |
| registry.gitlab.com/ | 5a9334f371f3 | p11-kit | no fix listed | 1 |
| registry.gitlab.com/ | 5b7636dfba3f | p11-kit | no fix listed | 1 |
| registry.gitlab.com/ | f6385712935f | p11-kit | 0.23.20-1ubuntu0.1+esm1 | 1 |
| registry.gitlab.com/ | d76185d7270d | p11-kit | no fix listed | 1 |
| registry.k8s.io/ | b48d7d13dd06 | p11-kit | no fix listed | 1 |
| registry.k8s.io/ | 0e64aedb0d0a | p11-kit | no fix listed | 1 |