CVE-2026-40356
HighAdvisory
Published 28 Apr 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.006
- 47th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 938
- of 17,790 indexed, latest versions
- Container images
- 999
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Red Hat Security Advisory: krb5 security update
Carried by container images the latest versions of 938 of 17,790 indexed charts deploy, on 999 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| krb5deb | 1.19.2-2, 1.19.2-2ubuntu0.1, 1.19.2-2ubuntu0.2, 1.19.2-2ubuntu0.3+20 more | 1.19.2-2ubuntu0.8, 1.20.1-2+deb12u5, 1.20.1-6ubuntu2.7, 1.21.3-5+deb13u1+2 more | 969 |
| krb5rpm | 1.20.1-8.el9, 1.20.1-9.el9_2, 1.21.1-1.el9, 1.21.1-2.el9_4+2 more | 0:1.20.1-9.el9_2.6, 0:1.21.1-2.el9_4.5, 0:1.21.1-8.el9_6.2 | 30 |
- OSV records
- DEBIAN-CVE-2026-40356RHSA-2026:24683RHSA-2026:24685RHSA-2026:24686UBUNTU-CVE-2026-40356ECHO-874c-29e0-d62b
- Also known as
- USN-8585-1
Charts affected
938 by stars
Container images carrying it
999 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| thongngo3301/ | a341af5976e3 | krb5 | 1.20.1-2+deb12u5 | 1 |
| timescale/ | a8e3322e1cf9 | krb5 | 1.19.2-2ubuntu0.8 | 1 |
| timescale/ | cdb9ae118899 | krb5 | 1.19.2-2ubuntu0.8 | 1 |
| timescale/ | e8d0a9cc3db5 | krb5 | 1.19.2-2ubuntu0.8 | 1 |
| timescale/ | ed719c0cd19d | krb5 | 1.19.2-2ubuntu0.8 | 1 |
| tinymediamanager/ | 2b34dc85099e | krb5 | 1.21.3-5+deb13u1 | 1 |
| tock/ | abf7880e0449 | krb5 | 1.21.3-5+deb13u1 | 1 |
| tombursch/ | b48e4ab727cd | krb5 | 1.21.3-5+deb13u1 | 1 |
| treskon/ | a475d80e4ecf | krb5 | 1.20.1-2+deb12u5 | 1 |
| trinodb/ | 38c6f24ab1a4 | krb5 | 0:1.21.1-2.el9_4.5 | 1 |
| trinodb/ | ee80ab5eeab2 | krb5 | 1.19.2-2ubuntu0.8 | 1 |
| trueosiris/ | 9356f98ad561 | krb5 | 1.19.2-2ubuntu0.8 | 1 |
| twentycrm/ | 2f78405a78be | krb5 | 1.19.2-2ubuntu0.8 | 1 |
| typesense/ | 035ccfbc3fd8 | krb5 | 1.19.2-2ubuntu0.8 | 1 |
| typesense/ | 91604dc128e2 | krb5 | 1.19.2-2ubuntu0.8 | 1 |
| typesense/ | dea1b62b7b6e | krb5 | 1.19.2-2ubuntu0.8 | 1 |
| ubuntu/ | 723891b5bc74 | krb5 | 1.19.2-2ubuntu0.8 | 1 |
| unitycatalog/ | 3a688197b218 | krb5 | 1.20.1-2+deb12u5 | 1 |
| valkey/ | c5d4f082b76d | krb5 | 1.20.1-2+deb12u5 | 1 |
| vaultwarden/ | 43498a94b22f | krb5 | 1.21.3-5+deb13u1 | 1 |
| vaultwarden/ | 84fd8a47f58d | krb5 | 1.20.1-2+deb12u5 | 1 |
| vaultwarden/ | 9a8eec71f4a5 | krb5 | 1.21.3-5+deb13u1 | 1 |
| vcnngr/ | 1a849a997b6d | krb5 | 1.20.1-2+deb12u5 | 1 |
| vcnngr/ | 30f1f05e57a6 | krb5 | 1.20.1-2+deb12u5 | 1 |
| veecode/ | c69fd286b489 | krb5 | 1.20.1-2+deb12u5 | 1 |
| vlebediantsev/ | 007c6670ff48 | krb5 | 1.20.1-2+deb12u5 | 1 |
| vlebediantsev/ | 945675fd2636 | krb5 | 1.20.1-2+deb12u5 | 1 |
| vlebediantsev/ | 54f69d116c50 | krb5 | 1.20.1-2+deb12u5 | 1 |
| wallarm/ | a3d4d2f780e8 | krb5 | 1.20.1-2+deb12u5 | 1 |
| wateim/ | 2520149ee574 | krb5 | 1.19.2-2ubuntu0.8 | 1 |
| wger/ | 997ead43aabd | krb5 | 1.20.1-6ubuntu2.7 | 1 |
| wistefan/ | e0887302b2d8 | krb5 | 1.19.2-2ubuntu0.8 | 1 |
| wolveix/ | 199be1064b18 | krb5 | 1.19.2-2ubuntu0.8 | 1 |
| wolveix/ | 464d11e36e10 | krb5 | 1.19.2-2ubuntu0.8 | 1 |
| workadventure/ | 92b664c2a06f | krb5 | 1.19.2-2ubuntu0.8 | 1 |
| xeladock/ | 4baf531453f1 | krb5 | 1.19.2-2ubuntu0.8 | 1 |
| xeladock/ | c259a67b1dff | krb5 | 1.19.2-2ubuntu0.8 | 1 |
| xeotek/ | 39a3b37a17c5 | krb5 | 1.19.2-2ubuntu0.8 | 1 |
| xom4ekp2p/ | d0e0aa238b02 | krb5 | 1.20.1-2+deb12u5 | 1 |
| xom4ekp2p/ | 2745b5fd8785 | krb5 | 1.20.1-2+deb12u5 | 1 |
| zabbix/ | 7322a94c5d7a | krb5 | 1.20.1-6ubuntu2.7 | 1 |
| zabbix/ | e5b594057c9c | krb5 | 1.19.2-2ubuntu0.8 | 1 |
| zabbix/ | 55d074b6b031 | krb5 | 1.20.1-6ubuntu2.7 | 1 |
| zabbix/ | 7e8c8e059533 | krb5 | 1.20.1-6ubuntu2.7 | 1 |
| zabbix/ | d59ffa07f615 | krb5 | 1.19.2-2ubuntu0.8 | 1 |
| zabbix/ | 0e5f69c4c54e | krb5 | 1.20.1-6ubuntu2.7 | 1 |
| zabbix/ | 7d4d58086515 | krb5 | 1.20.1-6ubuntu2.7 | 1 |
| zabbix/ | 99e9a090b516 | krb5 | 1.19.2-2ubuntu0.8 | 1 |
| zabbix/ | 915b3183e054 | krb5 | 1.20.1-6ubuntu2.7 | 1 |
| zabbix/ | ee4baa872280 | krb5 | 1.19.2-2ubuntu0.8 | 1 |