CVE-2026-60001
MediumAdvisory
Published 8 Jul 2026In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.5
- base score, highest
- EPSS
- 0.003
- 22nd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 345
- of 17,781 indexed, latest versions
- Container images
- 331
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 345 of 17,781 indexed charts deploy, on 331 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| opensshdeb | 1:6.6p1-2ubuntu2, 1:6.6p1-2ubuntu2.13, 1:7.2p2-4ubuntu2.2, 1:7.2p2-4ubuntu2.4+47 more | 1:8.9p1-3ubuntu0.16, 1:9.6p1-3ubuntu13.18, 1:9.6p1-3ubuntu13.18+Fips1, 1:10.2p1-2ubuntu3.4 | 302 |
| opensshapk | 10.3_p1-r0 | 10.3_p1-r1 | 29 |
- OSV records
- ALPINE-CVE-2026-60001DEBIAN-CVE-2026-60001UBUNTU-CVE-2026-60001
- Also known as
- USN-8533-1
Charts affected
345 by stars
Container images carrying it
331 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| xom4ekp2p/ | 2745b5fd8785 | openssh | no fix listed | 1 |
| yetiplatform/ | 9bcbe2650a14 | openssh | no fix listed | 1 |
| yetiplatform/ | 9c3006cedcca | openssh | no fix listed | 1 |
| gcr.io/ | 809338a69bd5 | openssh | no fix listed | 1 |
| gcr.io/ | 9bcfd2abc361 | openssh | no fix listed | 1 |
| ghcr.io/ | 4a16c6ccecb8 | openssh | 10.3_p1-r1 | 1 |
| ghcr.io/ | 150baab6115d | openssh | 10.3_p1-r1 | 1 |
| ghcr.io/ | a96e06ec5e9f | openssh | 10.3_p1-r1 | 1 |
| ghcr.io/ | 68e17a8aaa40 | openssh | no fix listed | 1 |
| ghcr.io/ | 5889bea38e56 | openssh | no fix listed | 1 |
| ghcr.io/ | 6fde1edc0983 | openssh | no fix listed | 1 |
| ghcr.io/ | 2ed0183564d7 | openssh | 1:9.6p1-3ubuntu13.18+Fips1 | 1 |
| ghcr.io/ | 853e6f105b51 | openssh | 1:9.6p1-3ubuntu13.18 | 1 |
| ghcr.io/ | 0e99f12bb040 | openssh | no fix listed | 1 |
| ghcr.io/ | 8d943799621b | openssh | no fix listed | 1 |
| ghcr.io/ | 8c05f7366981 | openssh | no fix listed | 1 |
| ghcr.io/ | a2be95de450c | openssh | no fix listed | 1 |
| ghcr.io/ | 16fda01ae58a | openssh | no fix listed | 1 |
| ghcr.io/ | 3225d2bc6b3c | openssh | no fix listed | 1 |
| ghcr.io/ | e59ebde55709 | openssh | no fix listed | 1 |
| ghcr.io/ | 6e82914e1051 | openssh | no fix listed | 1 |
| ghcr.io/ | 000c5ee5ee96 | openssh | no fix listed | 1 |
| ghcr.io/ | 78a82d810709 | openssh | no fix listed | 1 |
| ghcr.io/ | 92ee28c20a0d | openssh | no fix listed | 1 |
| ghcr.io/ | 472a25038957 | openssh | no fix listed | 1 |
| ghcr.io/ | 06a16d4f279f | openssh | 1:9.6p1-3ubuntu13.18 | 1 |
| ghcr.io/ | 3fbe4c29d14c | openssh | no fix listed | 1 |
| ghcr.io/ | 372d991e5888 | openssh | 10.3_p1-r1 | 1 |
| ghcr.io/ | 56690a89c79a | openssh | 10.3_p1-r1 | 1 |
| ghcr.io/ | cd25a5cc3f1b | openssh | no fix listed | 1 |
| ghcr.io/ | 984dc4f19162 | openssh | no fix listed | 1 |
| ghcr.io/ | 29458113b8b6 | openssh | 10.3_p1-r1 | 1 |
| ghcr.io/ | 757bdd779345 | openssh | no fix listed | 1 |
| ghcr.io/ | 24efef013a53 | openssh | no fix listed | 1 |
| ghcr.io/ | e28e0e7de11b | openssh | no fix listed | 1 |
| ghcr.io/ | 01563adc95fd | openssh | no fix listed | 1 |
| ghcr.io/ | 2b92df1143b9 | openssh | no fix listed | 1 |
| ghcr.io/ | 600221f0f43f | openssh | no fix listed | 1 |
| ghcr.io/ | a85e03d8bc1d | openssh | no fix listed | 1 |
| ghcr.io/ | ed86db9f0efe | openssh | no fix listed | 1 |
| ghcr.io/ | 20fde516ce31 | openssh | no fix listed | 1 |
| ghcr.io/ | bca73d0eee14 | openssh | no fix listed | 1 |
| ghcr.io/ | 4d337e14c80b | openssh | 1:9.6p1-3ubuntu13.18 | 1 |
| ghcr.io/ | f8c7afdcf439 | openssh | no fix listed | 1 |
| ghcr.io/ | 5bc5ca66d55a | openssh | no fix listed | 1 |
| ghcr.io/ | d7f93d2182fe | openssh | no fix listed | 1 |
| ghcr.io/ | 3e56bdd1b90d | openssh | no fix listed | 1 |
| ghcr.io/ | ce85ef0ce665 | openssh | no fix listed | 1 |
| ghcr.io/ | ff2af53897e7 | openssh | no fix listed | 1 |
| ghcr.io/ | c95fa31ead03 | openssh | no fix listed | 1 |