CVE-2026-3497
HighAdvisory
Published 12 Mar 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.2
- base score, highest
- EPSS
- 0.022
- 81st percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 247
- of 17,781 indexed, latest versions
- Container images
- 242
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Red Hat Security Advisory: openssh security update
Carried by container images the latest versions of 247 of 17,781 indexed charts deploy, on 242 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| opensshdeb | 1:7.2p2-4ubuntu2.2, 1:7.2p2-4ubuntu2.4, 1:7.2p2-4ubuntu2.6, 1:7.2p2-4ubuntu2.7+38 more | 1:8.2p1-4ubuntu0.13+esm1, 1:8.9p1-3ubuntu0.14, 1:9.2p1-2+deb12u9, 1:9.6p1-3ubuntu13.15+1 more | 227 |
| opensshrpm | 8.0p1-4.el8_1, 8.0p1-6.el8_4.2, 8.0p1-9.el8, 8.0p1-15.el8_6.3+7 more | 0:8.0p1-7.el8_4.1, 0:8.0p1-15.el8_6.4, 0:8.0p1-20.el8_8.3, 0:8.0p1-28.el8_10+3 more | 15 |
- OSV records
- DEBIAN-CVE-2026-3497RHSA-2026:10714RHSA-2026:14924RHSA-2026:15891RHSA-2026:15893RHSA-2026:6461RHSA-2026:6462RHSA-2026:6463UBUNTU-CVE-2026-3497
- Also known as
- RHSA-2026:9732, USN-8090-1, USN-8090-2
Charts affected
247 by stars
Container images carrying it
242 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| cheveo/ | 82240f890884 | openssh | 1:8.9p1-3ubuntu0.14 | 1 |
| chiefonboarding/ | 59bc7aa60fe7 | openssh | 1:10.0p1-7+deb13u2 | 1 |
| cortezaproject/ | 4ea78dfe5364 | openssh | 1:9.2p1-2+deb12u9 | 1 |
| countly/ | e3c238248f99 | openssh | 1:8.2p1-4ubuntu0.13+esm1 | 1 |
| cribl/ | 762747cb6796 | openssh | no fix listed | 1 |
| datamate/ | 2dd66b722464 | openssh | 1:8.9p1-3ubuntu0.14 | 1 |
| dblaci/ | eea697611af4 | openssh | 1:8.9p1-3ubuntu0.14 | 1 |
| dongjiang1989/ | 4bf9ae391948 | openssh | 1:8.2p1-4ubuntu0.13+esm1 | 1 |
| eclipseaerios/ | e7f5ba0bc64d | openssh | 1:10.0p1-7+deb13u2 | 1 |
| esphome/ | 9ab8cc88b28c | openssh | 1:9.2p1-2+deb12u9 | 1 |
| esphome/ | b2c6322700ac | openssh | 1:9.2p1-2+deb12u9 | 1 |
| esphome/ | def8b6e4f517 | openssh | 1:9.2p1-2+deb12u9 | 1 |
| ethereumex/ | a7603aa8df4c | openssh | no fix listed | 1 |
| fiware/ | 29456835bb2c | openssh | 1:8.2p1-4ubuntu0.13+esm1 | 1 |
| fiware/ | d551a13e8278 | openssh | 1:9.2p1-2+deb12u9 | 1 |
| gethue/ | 11b649636e68 | openssh | 1:8.2p1-4ubuntu0.13+esm1 | 1 |
| gethue/ | 5702b2c37ff9 | openssh | no fix listed | 1 |
| gethue/ | 7d5c1b9f8a79 | openssh | 1:8.9p1-3ubuntu0.14 | 1 |
| gitlab/ | 860d4a3fec7a | openssh | 1:8.2p1-4ubuntu0.13+esm1 | 1 |
| haugene/ | 059216cfae4b | openssh | 1:8.2p1-4ubuntu0.13+esm1 | 1 |
| haveagitgat/ | 1256348872ce | openssh | 1:8.2p1-4ubuntu0.13+esm1 | 1 |
| helicone/ | 4c69b971a7e4 | openssh | 1:8.2p1-4ubuntu0.13+esm1 | 1 |
| helicone/ | 4a913936c97b | openssh | 1:9.2p1-2+deb12u9 | 1 |
| hiboxsystems/ | b59f01bc0418 | openssh | 1:10.0p1-7+deb13u2 | 1 |
| hiboxsystems/ | dcffb926e563 | openssh | 1:9.2p1-2+deb12u9 | 1 |
| hirosystems/ | 9c98b23c1515 | openssh | 1:9.2p1-2+deb12u9 | 1 |
| hmediade/ | 7f005eb6c718 | openssh | 1:8.9p1-3ubuntu0.14 | 1 |
| hyperledger/ | c65891b6c237 | openssh | no fix listed | 1 |
| ibmcom/ | c796a4c693b4 | openssh | 0:8.0p1-28.el8_10 | 1 |
| ibmcom/ | b5d8c6714dbc | openssh | no fix listed | 1 |
| ibmcom/ | e17bdccc5030 | openssh | no fix listed | 1 |
| ildarmukhametzyanov/ | 15d23720a3ee | openssh | 1:9.2p1-2+deb12u9 | 1 |
| inseefrlab/ | 31f04ca7436b | openssh | 1:8.9p1-3ubuntu0.14 | 1 |
| instill/ | c4a393e601ed | openssh | 1:10.0p1-7+deb13u2 | 1 |
| instill/ | ebe12f77a3f9 | openssh | 1:10.0p1-7+deb13u2 | 1 |
| instill/ | e980125e5ba5 | openssh | 1:10.0p1-7+deb13u2 | 1 |
| intelowlproject/ | 0b22e547ea6b | openssh | 1:9.2p1-2+deb12u9 | 1 |
| ironmansoftware/ | 1943c73cce31 | openssh | 1:8.2p1-4ubuntu0.13+esm1 | 1 |
| jedi132000/ | dc2a81e92f23 | openssh | 1:8.2p1-4ubuntu0.13+esm1 | 1 |
| jenkins/ | 95313257a8cd | openssh | 1:9.2p1-2+deb12u9 | 1 |
| jenkins/ | de4fea113221 | openssh | 1:9.2p1-2+deb12u9 | 1 |
| knspar/ | 0c4f0543ee58 | openssh | 1:9.2p1-2+deb12u9 | 1 |
| kong/ | a6ac46531193 | openssh | 1:8.9p1-3ubuntu0.14 | 1 |
| kusionstack/ | 126c8f0b0976 | openssh | 1:8.9p1-3ubuntu0.14 | 1 |
| laly9999/ | dd0e503913e1 | openssh | 1:9.2p1-2+deb12u9 | 1 |
| langgenius/ | 8269050f192e | openssh | 1:9.6p1-3ubuntu13.15 | 1 |
| library/ | d41127070014 | openssh | 1:9.2p1-2+deb12u9 | 1 |
| library/ | da5aee29682d | openssh | 1:10.0p1-7+deb13u2 | 1 |
| linuxserver/ | a847b5b2d860 | openssh | no fix listed | 1 |
| linuxserver/ | a5e43a05ae79 | openssh | 1:8.9p1-3ubuntu0.14 | 1 |