CVE-2026-66032
HighAdvisory
Published 24 Jul 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.8
- base score, highest
- EPSS
- 0.004
- 38th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 813
- of 17,787 indexed, latest versions
- Container images
- 682
- deployed by those charts
- Fix available
- 1 of 1
- affected package
The matching OSV records carry no description.
Carried by container images the latest versions of 813 of 17,787 indexed charts deploy, on 682 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| libssh2deb | 1.5.0-2ubuntu0.1, 1.8.0-2.1build1, 1.10.0-3, 1.10.0-3+b1+10 more | 1.10.0-3+deb12u1, 1.11.0-4.1ubuntu0.24.04.4, 1.11.1-1+deb13u2, 1.11.1-1+e5+1 more | 682 |
- OSV records
- DEBIAN-CVE-2026-66032UBUNTU-CVE-2026-66032ECHO-416c-75e9-1367
- Also known as
- USN-8722-1
Charts affected
813 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| monicamonicaOfficialVerified publisher | 1.0.15 | 1 of 1See more | 5,634 |
| nautobotnautobotOfficialVerified publisher | 3.1.2 | 1 of 1See more | 4,332 |
| paperless-ngxpaperless-ngxVerified publisher | 0.3.22 | 1 of 3See more | 8,489 |
| tbmq-clustertbmq-helm-chartOfficialVerified publisher | 2.1.0 | 2 of 3See more | 3,534 |
| phpmyadminalekcVerified publisher | 0.3.1 | 1 of 1See more | 2,582 |
| wazuh-agentavistoVerified publisher | 4.12.2 | 1 of 1See more | 6,457 |
| cortexcortex | 3.3.8 | 1 of 4See more | 3,897 |
| docmosthelmforgeVerified publisher | 1.2.11 | 1 of 4See more | 5,564 |
| wordpresshelmforgeVerified publisher | 3.0.6 | 1 of 3See more | 4,148 |
| passboltpassbolt | 2.1.1 | 1 of 6See more | 13,350 |
| thehivestrangebee-helmOfficialVerified publisher | 1.0.6 | 3 of 7See more | 16,210 |
| uffizzi-controlleruffizzi-controller | 2.4.6 | 1 of 11See more | 14,240 |
| minecraft-overvieweralphani-helm-chartsVerified publisher | 0.1.0 | 1 of 3See more | 3,380 |
| photoprismandrenarchyVerified publisher | 8.15.0 | 1 of 1See more | 8,825 |
| baserowbaserow-chartVerified publisher | 1.0.56 | 2 of 6See more | 17,263 |
| dolibarrcowboysysopVerified publisher | 9.0.3 | 1 of 3See more | 9,106 |
| seafiledatamateVerified publisher | 0.6.0 | 1 of 6See more | 27,267 |
| jellyfindjjudas21Verified publisher | 4.0.8 | 1 of 1See more | 2,604 |
| gitops-promotergitops-promoterOfficialVerified publisher | 0.17.0 | 1 of 2See more | 2,814 |
| glpiglpi-conteiner | 0.1.0 | 2 of 3See more | 12,170 |
| dolibarrhelmforgeVerified publisher | 1.2.18 | 1 of 3See more | 4,109 |
| karakeephelmforgeVerified publisher | 1.2.9 | 1 of 3See more | 9,460 |
| openhabhelmforgeVerified publisher | 1.2.0 | 1 of 1See more | 3,641 |
| openctihelm-openctiVerified publisher | 3.0.9 | 1 of 8See more | 3,383 |
| infrahubinfrahubVerified publisher | 4.33.2 | 1 of 5See more | 10,428 |
| kubeflowkubeflow | 1.6.2 | 1 of 45See more | 96,941 |
| testkubekubeshop | 2.13.2 | 1See more | — |
| headplanenbcloudVerified publisher | 0.1.2 | 1 of 4See more | 7,949 |
| steampipe-powerpipe-kubernetessteampipe-powerpipe-kubernetesVerified publisher | 0.13.1 | 2 of 2See more | 5,468 |
| uffizzi-appuffizzi-app | 1.3.0 | 1 of 14See more | 19,337 |
| grafana-pdf-exporterwiremindVerified publisher | 2.1.1 | 1 of 1See more | 9,746 |
| matrixzekker6Verified publisher | 3.30.0 | 1 of 4See more | 5,557 |
| vaultwardenandrenarchyVerified publisher | 6.27.0 | 1 of 1See more | 1,744 |
| geoservercloudcamptocamp2 | 3.0.1 | 7 of 7See more | 10,546 |
| collabora-codechrisingenhaag | 2.6.0 | 1 of 1See more | 4,180 |
| convertigoconvertigoOfficialVerified publisher | 8.4.3 | 2 of 5See more | 17,404 |
| cosmocosmo-platformOfficialVerified publisher | 0.20.0 | 2 of 10See more | 28,839 |
| dask-kubernetes-operatordask | 2026.3.0 | 1 of 1See more | 9,316 |
| rsshubgabe565Verified publisher | 0.8.0 | 1 of 3See more | 1,717 |
| apimgraviteeioVerified publisher | 4.12.19 | 2 of 4See more | 4,806 |
| nacosgujunxiang | 0.1.5 | 1 of 1See more | 1,767 |
| infrahub-enterpriseinfrahub-enterpriseVerified publisher | 4.19.2 | 1 of 5See more | 10,530 |
| coreinstill-aiOfficialVerified publisher | 0.1.75 | 3 of 15See more | 30,816 |
| webdavk8s-webdavVerified publisher | 0.0.7 | 1 of 1See more | 1,681 |
| kubecostmesosphere-stable | 0.37.5 | 1 of 9See more | 17,693 |
| observalobservalVerified publisher | 1.13.1 | 1 of 8See more | 5,828 |
| openclaw-with-brainopenclaw-with-brainVerified publisher | 0.1.67 | 1 of 3See more | 5,218 |
| oesopsmxVerified publisher | 4.0.32 | 1 of 25See more | 107,811 |
| part-dbpart-dbVerified publisher | 0.1.2 | 1 of 1See more | 3,327 |
| phpmyadminphpmyadminVerified publisher | 1.0.3 | 1 of 1See more | 2,582 |
Container images carrying it
682 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | af7ea052cf21 | libssh2 | 1.10.0-3+deb12u1 | 1 |
| ghcr.io/ | dcfd14877740 | libssh2 | 1.10.0-3+deb12u1 | 1 |
| ghcr.io/ | ce85ef0ce665 | libssh2 | 1.10.0-3+deb12u1 | 1 |
| ghcr.io/ | 4e322858fe56 | libssh2 | 1.10.0-3+deb12u1 | 1 |
| ghcr.io/ | 87eb325d306f | libssh2 | 1.10.0-3+deb12u1 | 1 |
| ghcr.io/ | 0fe80de2d22c | libssh2 | 1.10.0-3+deb12u1 | 1 |
| ghcr.io/ | 0642357c5dbd | libssh2 | 1.10.0-3+deb12u1 | 1 |
| ghcr.io/ | 4b05bcd28e69 | libssh2 | 1.11.1-1+deb13u2 | 1 |
| ghcr.io/ | 57ad9565bff3 | libssh2 | 1.11.1-1+deb13u2 | 1 |
| ghcr.io/ | 665f2f5cc548 | libssh2 | 1.11.1-1+deb13u2 | 1 |
| ghcr.io/ | ab255bea133e | libssh2 | 1.10.0-3+deb12u1 | 1 |
| ghcr.io/ | b89f83345532 | libssh2 | 1.11.1-1+deb13u2 | 1 |
| ghcr.io/ | 17666811f6a7 | libssh2 | 1.11.1-1+deb13u2 | 1 |
| ghcr.io/ | cdf1e3329bfe | libssh2 | 1.11.1-1+deb13u2 | 1 |
| ghcr.io/ | c1b37e821f72 | libssh2 | 1.11.1-1ubuntu0.26.04.4 | 1 |
| ghcr.io/ | 2b993cb232eb | libssh2 | 1.10.0-3+deb12u1 | 1 |
| ghcr.io/ | 39953b387b61 | libssh2 | 1.11.1-1+deb13u2 | 1 |
| ghcr.io/ | 606896116558 | libssh2 | 1.10.0-3+deb12u1 | 1 |
| ghcr.io/ | 533ce58c6e02 | libssh2 | 1.11.1-1+deb13u2 | 1 |
| ghcr.io/ | c79b2e64a211 | libssh2 | 1.10.0-3+deb12u1 | 1 |
| ghcr.io/ | 917e53402d51 | libssh2 | 1.11.1-1+deb13u2 | 1 |
| ghcr.io/ | ed07e7ca098d | libssh2 | 1.10.0-3+deb12u1 | 1 |
| ghcr.io/ | 0250d9cb0d74 | libssh2 | 1.11.1-1+deb13u2 | 1 |
| ghcr.io/ | 1eee8e20a87f | libssh2 | 1.10.0-3+deb12u1 | 1 |
| ghcr.io/ | fafb72e98f22 | libssh2 | 1.10.0-3+deb12u1 | 1 |
| ghcr.io/ | 61b2eb9eed8e | libssh2 | 1.11.1-1+deb13u2 | 1 |
| ghcr.io/ | fa35b9519abb | libssh2 | 1.11.1-1+deb13u2 | 1 |
| ghcr.io/ | 788173c5876d | libssh2 | 1.11.1-1+deb13u2 | 1 |
| ghcr.io/ | 2bc7b260e44e | libssh2 | 1.11.1-1+deb13u2 | 1 |
| ghcr.io/ | 220c5e4e1a3d | libssh2 | 1.10.0-3+deb12u1 | 1 |
| ghcr.io/ | e1351a977607 | libssh2 | 1.10.0-3+deb12u1 | 1 |
| ghcr.io/ | 99fd4cb0f4fe | libssh2 | 1.10.0-3+deb12u1 | 1 |
| ghcr.io/ | c73527cde81c | libssh2 | 1.10.0-3+deb12u1 | 1 |
| ghcr.io/ | ee9cf22a39ab | libssh2 | 1.10.0-3+deb12u1 | 1 |
| ghcr.io/ | 6daa2dc7556b | libssh2 | 1.11.1-1+deb13u2 | 1 |
| ghcr.io/ | 63873f3f698e | libssh2 | no fix listed | 1 |
| ghcr.io/ | a3c27ee3fb2f | libssh2 | 1.10.0-3+deb12u1 | 1 |
| ghcr.io/ | 86ab9effd1a5 | libssh2 | 1.11.1-1+deb13u2 | 1 |
| ghcr.io/ | 6e04659a3baa | libssh2 | 1.10.0-3+deb12u1 | 1 |
| ghcr.io/ | 8622ea9e43c0 | libssh2 | 1.10.0-3+deb12u1 | 1 |
| ghcr.io/ | 1572e12bc93c | libssh2 | 1.10.0-3+deb12u1 | 1 |
| ghcr.io/ | dbaa8527bf4c | libssh2 | 1.10.0-3+deb12u1 | 1 |
| ghcr.io/ | 1b53b0b3488e | libssh2 | 1.11.1-1+deb13u2 | 1 |
| ghcr.io/ | d19d886d5090 | libssh2 | 1.10.0-3+deb12u1 | 1 |
| ghcr.io/ | 5a6fe78d4d15 | libssh2 | 1.10.0-3+deb12u1 | 1 |
| ghcr.io/ | 9b220ea83329 | libssh2 | 1.11.1-1+deb13u2 | 1 |
| ghcr.io/ | 7bff29dcec72 | libssh2 | 1.10.0-3+deb12u1 | 1 |
| ghcr.io/ | e65123a43ecc | libssh2 | 1.11.1-1+deb13u2 | 1 |
| ghcr.io/ | fbba58ddb1a6 | libssh2 | 1.10.0-3+deb12u1 | 1 |
| ghcr.io/ | 416e980f76a6 | libssh2 | 1.10.0-3+deb12u1 | 1 |