CVE-2026-25749
HighAdvisory
Published 6 Feb 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.3
- base score, highest
- EPSS
- 0.002
- 13th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 194
- of 17,781 indexed, latest versions
- Container images
- 177
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Red Hat Security Advisory: vim security update
Carried by container images the latest versions of 194 of 17,781 indexed charts deploy, on 177 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| vimrpm | 2:8.0.1763-13.el8, 2:8.0.1763-15.el8, 2:8.0.1763-19.el8_6.2, 2:8.0.1763-19.el8_6.4+6 more | 2:8.0.1763-22.el8_10, 2:8.2.2637-23.el9_7.1, 2:9.1.083-6.el10_1.1 | 66 |
| vimdeb | 2:7.4.052-1ubuntu3, 2:7.4.052-1ubuntu3.1, 2:7.4.1689-3ubuntu1.2, 2:8.0.1453-1ubuntu1+27 more | 2:7.4.052-1ubuntu3.1+esm23, 2:7.4.1689-3ubuntu1.5+esm29, 2:8.0.1453-1ubuntu1.13+esm14, 2:8.1.2269-1ubuntu5.32+esm2+2 more | 111 |
- OSV records
- RHSA-2026:4442RHSA-2026:4715RHSA-2026:5602RLSA-2026:4442RLSA-2026:5602DEBIAN-CVE-2026-25749UBUNTU-CVE-2026-25749
- Also known as
- USN-8101-1
Charts affected
194 by stars
Container images carrying it
177 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| svtechnmaa/ | 6e368ace0977 | vim | 2:8.1.2269-1ubuntu5.32+esm2 | 1 |
| timescale/ | e8d0a9cc3db5 | vim | 2:8.2.3995-1ubuntu2.26 | 1 |
| tpdock/ | 3da600c95a49 | vim | 2:7.4.1689-3ubuntu1.5+esm29 | 1 |
| twentycrm/ | 2f78405a78be | vim | 2:8.2.3995-1ubuntu2.26 | 1 |
| vividplanet/ | ae1c5b1cbecb | vim | 2:8.0.1763-22.el8_10 | 1 |
| voltha/ | 59ab2a00f712 | vim | 2:7.4.052-1ubuntu3.1+esm23 | 1 |
| ghcr.io/ | 13a01be102b0 | vim | 2:8.0.1763-22.el8_10 | 1 |
| ghcr.io/ | 6fde1edc0983 | vim | 2:8.1.2269-1ubuntu5.32+esm2 | 1 |
| ghcr.io/ | 16fda01ae58a | vim | no fix listed | 1 |
| ghcr.io/ | 0cf25ed621e2 | vim | 2:8.0.1763-22.el8_10 | 1 |
| ghcr.io/ | 0635f17c9d2c | vim | 2:8.0.1763-22.el8_10 | 1 |
| ghcr.io/ | e34964e336c1 | vim | 2:8.0.1763-22.el8_10 | 1 |
| ghcr.io/ | 0c5a3398d1e4 | vim | 2:8.0.1763-22.el8_10 | 1 |
| ghcr.io/ | 8ba040e79ca0 | vim | 2:8.0.1763-22.el8_10 | 1 |
| ghcr.io/ | aa45adaf59a7 | vim | 2:8.1.2269-1ubuntu5.32+esm2 | 1 |
| ghcr.io/ | ab535d1fef5d | vim | no fix listed | 1 |
| ghcr.io/ | 06a16d4f279f | vim | 2:9.1.0016-1ubuntu7.10 | 1 |
| ghcr.io/ | 8e53861be292 | vim | no fix listed | 1 |
| ghcr.io/ | bc70cdb5a01a | vim | 2:8.2.2637-23.el9_7.1 | 1 |
| ghcr.io/ | 8caf5289fe73 | vim | 2:8.0.1763-22.el8_10 | 1 |
| ghcr.io/ | ec01d3ac7887 | vim | 2:9.1.0016-1ubuntu7.10 | 1 |
| ghcr.io/ | 6047599cd78e | vim | 2:8.1.2269-1ubuntu5.32+esm2 | 1 |
| ghcr.io/ | c9bd82dc5fda | vim | 2:8.1.2269-1ubuntu5.32+esm2 | 1 |
| ghcr.io/ | fdb5501cdfb9 | vim | 2:8.1.2269-1ubuntu5.32+esm2 | 1 |
| ghcr.io/ | 3a4715b46aa2 | vim | 2:8.1.2269-1ubuntu5.32+esm2 | 1 |
| ghcr.io/ | e5571acd10ce | vim | 2:8.2.3995-1ubuntu2.26 | 1 |
| ghcr.io/ | ef756c7d784b | vim | 2:8.1.2269-1ubuntu5.32+esm2 | 1 |
| ghcr.io/ | c863aa9875fa | vim | 2:8.1.2269-1ubuntu5.32+esm2 | 1 |
| ghcr.io/ | 61deadd1ec78 | vim | 2:8.1.2269-1ubuntu5.32+esm2 | 1 |
| ghcr.io/ | 4273dfaf0295 | vim | 2:8.2.3995-1ubuntu2.26 | 1 |
| ghcr.io/ | 0eb230e2381a | vim | 2:8.2.3995-1ubuntu2.26 | 1 |
| ghcr.io/ | 6011182e3946 | vim | 2:8.1.2269-1ubuntu5.32+esm2 | 1 |
| ghcr.io/ | 292b3614670f | vim | 2:8.1.2269-1ubuntu5.32+esm2 | 1 |
| ghcr.io/ | 779858b5e11d | vim | 2:8.1.2269-1ubuntu5.32+esm2 | 1 |
| ghcr.io/ | f52e66eff50b | vim | 2:8.0.1453-1ubuntu1.13+esm14 | 1 |
| ghcr.io/ | 8b99a8104a2f | vim | 2:8.2.2637-23.el9_7.1 | 1 |
| ghcr.io/ | 533ce58c6e02 | vim | no fix listed | 1 |
| ghcr.io/ | c79b2e64a211 | vim | no fix listed | 1 |
| ghcr.io/ | fafb72e98f22 | vim | no fix listed | 1 |
| ghcr.io/ | 26953ec68d5d | vim | 2:8.1.2269-1ubuntu5.32+esm2 | 1 |
| ghcr.io/ | d7c43c3135c6 | vim | 2:8.1.2269-1ubuntu5.32+esm2 | 1 |
| public.ecr.aws/ | 849e235e2d3e | vim | 2:8.0.1763-22.el8_10 | 1 |
| public.ecr.aws/ | 9083e60c38bc | vim | 2:8.2.2637-23.el9_7.1 | 1 |
| public.ecr.aws/ | d7c3def9252b | vim | 2:8.2.2637-23.el9_7.1 | 1 |
| public.ecr.aws/ | 573779e57fae | vim | 2:8.1.2269-1ubuntu5.32+esm2 | 1 |
| public.ecr.aws/ | 794b3bff9510 | vim | 2:8.2.2637-23.el9_7.1 | 1 |
| quay.io/ | 70d138997acd | vim | 2:8.2.2637-23.el9_7.1 | 1 |
| quay.io/ | 7302e0c8e5a7 | vim | 2:8.0.1763-22.el8_10 | 1 |
| quay.io/ | 13aaae779248 | vim | 2:8.0.1763-22.el8_10 | 1 |
| quay.io/ | 10df27bc5560 | vim | 2:8.0.1763-22.el8_10 | 1 |