CVE-2026-5435

High

Advisory

Published 28 Apr 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.3; base score, highest
EPSS: 0.002; 15th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,504; of 17,821 indexed, latest versions
Container images: 2,538; deployed by those charts
Fix available: 1 of 3; affected packages

CVE-2026-5435 affecting package glibc 2.38-21

Carried by container images the latest versions of 2,504 of 17,821 indexed charts deploy, on 2,538 images.

Affected package	Affected versions	Fixed in	Images
glibcdeb	2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+61 more	2.35-0ubuntu3.14, 2.39-0ubuntu8.8, 2.41-12+deb13u2+e5, 2.43-2ubuntu2.3	2,517
eglibcdeb	2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 more	no fix listed	7
glibcrpm	2.38-16.azl3, 2.38-18.azl3, 2.38-20.azl3	no fix listed	14

OSV records: DEBIAN-CVE-2026-5435 UBUNTU-CVE-2026-5435 AZL-84599 ECHO-53d2-a97b-142d
Also known as: USN-8611-1

Charts affected

2,504 by stars

Chart

Latest

Affected images

Radar Score

changedetection-iozekker6

1.102.0

1 of 1 See more

changedetection-io zekker6 1.102.0

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.7	096dae27b5d6	glibc@2.36-9+deb12u14	no fix listed

Open the chart page →

2,710

endlessh-gozekker6

0.4.0

1 of 1 See more

endlessh-go zekker6 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container image	Digest	Package	Fixed in
ghcr.io/shizunge/endlessh-go :2026.0730.0	8826dad32623	glibc@2.41-12+deb13u3	no fix listed

Open the chart page →

411

NEW_APPzekker6

0.0.0

1 of 1 See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-5435.

Container image	Digest	Package	Fixed in
library/nginx :latest	abe47724e466	glibc@2.41-12+deb13u4	no fix listed

Open the chart page →

1,593

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-5435.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	glibc@2.27-3ubuntu1.4	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	glibc@2.31-0ubuntu9.2	no fix listed

Open the chart page →

9,297

Container images carrying it

2,538 by charts deploying them

A fixed version is listed for 1 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/ghost :6.63.0	e05bc1169fb2	glibc@2.36-9+deb12u14	no fix listed	1
library/golang :latest	3680233e3204	glibc@2.41-12+deb13u4	no fix listed	1
library/haproxy :3.4.1	0f597665a2a6	glibc@2.41-12+deb13u3	no fix listed	1
library/haproxy :3.1-bookworm	49a0a0d6f0b8	glibc@2.36-9+deb12u10	no fix listed	1
library/haproxy :2.8.28	8baa7d29a27a	glibc@2.41-12+deb13u3	no fix listed	1
library/haproxy :3.2	ad870ce41292	glibc@2.41-12+deb13u4	no fix listed	1
library/haproxy :3.2	de601ccc9a79	glibc@2.41-12+deb13u3	no fix listed	1
library/haproxy :2.9.6	fc5748ff7c72	glibc@2.36-9+deb12u4	no fix listed	1
library/httpd :2.4.63	1ae8051591a5	glibc@2.36-9+deb12u10	no fix listed	1
library/influxdb :1.12.3-meta	8812029260b5	glibc@2.36-9+deb12u13	no fix listed	1
library/influxdb :2.8	af89d51080c9	glibc@2.36-9+deb12u14	no fix listed	1
library/influxdb :1.12.3-data	b0f9fc41ed79	glibc@2.36-9+deb12u13	no fix listed	1
library/influxdb :latest	f75e48af0598	glibc@2.36-9+deb12u14	no fix listed	1
library/kibana :7.17.15	0172f1c538e7	glibc@2.31-0ubuntu9.14	no fix listed	1
library/kibana :8.18.0	04c0fc150f3a	glibc@2.31-0ubuntu9.17	no fix listed	1
library/kibana :7.17.8	c5781ba340ef	glibc@2.31-0ubuntu9.9	no fix listed	1
library/kibana :7.17.3	e2e2031c15be	glibc@2.31-0ubuntu9.7	no fix listed	1
library/logstash :7.17.8	17a4f64e9cf5	glibc@2.31-0ubuntu9.9	no fix listed	1
library/mariadb :10.7.3	07e06f2e7ae9	glibc@2.31-0ubuntu9.7	no fix listed	1
library/mariadb :10.11.2	1c33370a599c	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.14	1
library/mariadb :10.4	22edfe1c7834	glibc@2.31-0ubuntu9.16	no fix listed	1
library/mariadb :10.8.2-focal	490f01279be1	glibc@2.31-0ubuntu9.2	no fix listed	1
library/mariadb :12.0.2	5b6a1eac15b8	glibc@2.39-0ubuntu8.6	2.39-0ubuntu8.8	1
library/mariadb :12.3.2	628f228f0fd5	glibc@2.39-0ubuntu8.7	2.39-0ubuntu8.8	1
library/mariadb :11.8.4	6b848cb24fbb	glibc@2.39-0ubuntu8.6	2.39-0ubuntu8.8	1
library/mariadb :10.6.21	8a16204dc96c	glibc@2.31-0ubuntu9.17	no fix listed	1
library/mariadb :10.7	9a48ac9f196f	glibc@2.31-0ubuntu9.9	no fix listed	1
library/mariadb :12.2.2	b1cb255a9939	glibc@2.39-0ubuntu8.7	2.39-0ubuntu8.8	1
library/mariadb :10.10.2	bfc25a68e113	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.14	1
library/mariadb :10.6.15	e22328f4d714	glibc@2.31-0ubuntu9.12	no fix listed	1
library/mariadb :10.9.4	fbb8456ebdb1	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.14	1
library/mariadb :11.7.2	fcc7fcd7114a	glibc@2.39-0ubuntu8.4	2.39-0ubuntu8.8	1
library/matomo :5.1.2-apache	2415789e1602	glibc@2.36-9+deb12u9	no fix listed	1
library/matomo :5.13.0-apache	8e6bdd396496	glibc@2.41-12+deb13u3	no fix listed	1
library/memcached :1.6.42	26983a43c918	glibc@2.41-12+deb13u3	no fix listed	1
library/memcached :1.6.40	9ae868852d0b	glibc@2.41-12	no fix listed	1
library/memcached :1.6.40	cc523a19da58	glibc@2.41-12+deb13u1	no fix listed	1
library/memcached :1.6.45	dc561d52bb8a	glibc@2.41-12+deb13u3	no fix listed	1
library/memcached :1.6.42-trixie	e2a8683c7fbb	glibc@2.41-12+deb13u3	no fix listed	1
library/mongo :7.0.14	0032d2ca20db	glibc@2.35-0ubuntu3.8	2.35-0ubuntu3.14	1
library/mongo :4.4.13	05678ae4e5e1	glibc@2.31-0ubuntu9.7	no fix listed	1
library/mongo :3.6	146c1fd999a6	glibc@2.23-0ubuntu11.2	no fix listed	1
library/mongo :5.0.32-focal	3b6c281e1c08	glibc@2.31-0ubuntu9.17	no fix listed	1
library/mongo :4.4-bionic	3d0e6df9fd5b	glibc@2.27-3ubuntu1.4	no fix listed	1
library/mongo :5.0.14-focal	50cae5081ab4	glibc@2.31-0ubuntu9.9	no fix listed	1
library/mongo :6.0.12	646902910d6a	glibc@2.35-0ubuntu3.6	2.35-0ubuntu3.14	1
library/mongo :4.2	699d652ed674	glibc@2.27-3ubuntu1.6	no fix listed	1
library/mongo :4.2.1	6ca49afbcb2b	glibc@2.27-3ubuntu1	no fix listed	1
library/mongo :6.0.2	71a63fc2438e	glibc@2.31-0ubuntu9.9	no fix listed	1
library/mongo :5.0.21	7c81758cb295	glibc@2.31-0ubuntu9.12	no fix listed	1