StackRadar

CVE-2026-6791

Critical

Advisory

Published 2 Jul 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.0
base score, highest
EPSS
0.002
11th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,584
of 17,792 indexed, latest versions
Container images
2,622
deployed by those charts
Fix available
2 of 4
affected packages

CVE-2026-6791 affecting package glibc 2.38-21

Carried by container images the latest versions of 2,584 of 17,792 indexed charts deploy, on 2,622 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+62 more2.35-0ubuntu3.15, 2.39-0ubuntu8.9, 2.41-12+deb13u3+e2, 2.43-2ubuntu2.42,562
glibcapk2.37-r6, 2.38-r6, 2.39-r7, 2.40-r1+10 more2.43-r1030
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
glibcrpm2.38-16.azl3, 2.38-18.azl3, 2.38-20.azl3no fix listed23
OSV records
CGA-pg7p-jc78-5qw9DEBIAN-CVE-2026-6791UBUNTU-CVE-2026-6791AZL-95492ECHO-9658-3093-2999
Also known as
CGA-q9rx-85qf-q76x, USN-8737-1, USN-8737-2

Charts affected

2,584 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,622 by charts deploying them

A fixed version is listed for 2 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
archivebox/archivebox:0.7.41a5a37331091
glibc@2.36-9+deb12u14
no fix listed
1
arilot/docker-bitcoind:0.17.127a4f7e0f9f1
glibc@2.23-0ubuntu10
no fix listed
1
aristidetm/basic-notebook:3.6.5469dbc951224
glibc@2.36-9+deb12u7
no fix listed
1
arthurjguerra18/revwallet:v0.7.12f540af20b307
glibc@2.36-9+deb12u7
no fix listed
1
artifacthub/tracker:v1.23.05368d21a6e5c
glibc@2.41-12+deb13u3
no fix listed
1
artur9010/wait-for:v1.0.06b4de3ce8b0e
glibc@2.36-9+deb12u7
no fix listed
1
arunvelsriram/utils:latest655ad18fd8d6
glibc@2.39-0ubuntu8.5
2.39-0ubuntu8.9
1
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
glibc@2.31-0ubuntu9.12
no fix listed
1
assistiot/fl_orchestrator:dbmongo4-latestd157fbe150e3
glibc@2.31-0ubuntu9.9
no fix listed
1
assistiot/identity-manager_db:latest0d3e6d35f168
glibc@2.36-9+deb12u3
no fix listed
1
assistiot/location_processing:lateste9bae124095f
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.15
1
assistiot/open_api_backend:1.1.230812ba93555
glibc@2.35-0ubuntu3.5
2.35-0ubuntu3.15
1
assistiot/sdn_controller:2.4.0ea254b6d8a31
glibc@2.31-0ubuntu9.9
no fix listed
1
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
glibc@2.36-9+deb12u4
no fix listed
1
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
glibc@2.36-9+deb12u4
no fix listed
1
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
glibc@2.36-9+deb12u1
no fix listed
1
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
glibc@2.31-0ubuntu9.9
no fix listed
1
athou/commafeed:6.2.0-postgresql5e388351df1a
glibc@2.41-12+deb13u1
no fix listed
1
atlassian/bamboo:12.1.114af4bb6c8d46
glibc@2.39-0ubuntu8.8
2.39-0ubuntu8.9
1
atlassian/bamboo-agent-base:12.1.1151c2d7274eef
glibc@2.39-0ubuntu8.8
2.39-0ubuntu8.9
1
atlassian/bitbucket:10.2.705933f2b1cfd
glibc@2.39-0ubuntu8.8
2.39-0ubuntu8.9
1
atlassian/confluence-server:7.10.03b9222ab32ef
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.15
1
atlassian/crowd:7.2.3c81cc7d6bc9e
glibc@2.39-0ubuntu8.8
2.39-0ubuntu8.9
1
atlassian/crowd:5.2.2ebf761c7d437
glibc@2.39-0ubuntu8.8
2.39-0ubuntu8.9
1
atlassian/jira-software:8.14.037bc46cbec1a
glibc@2.35-0ubuntu3.6
2.35-0ubuntu3.15
1
atlassian/jira-software:9.7.264a75aa4ec4e
glibc@2.39-0ubuntu8.4
2.39-0ubuntu8.9
1
atlassian/jira-software:11.3.11e5548cd4eea8
glibc@2.39-0ubuntu8.8
2.39-0ubuntu8.9
1
avaprotocol/ap-avs:1.2.0c430ea5c37d6
glibc@2.36-9+deb12u7
no fix listed
1
avinash263/pyredis263:latestaa2b8727f1a6
glibc@2.36-9
no fix listed
1
avzini/web-app:latestf40b30210ed0
glibc@2.36-9+deb12u3
no fix listed
1
baserow/backend:2.3.37c00549b3a6f
glibc@2.41-12+deb13u3
no fix listed
1
baserow/backend:1.31.1e0b3c8130b91
glibc@2.36-9+deb12u9
no fix listed
1
baserow/baserow:1.30.1df0c42eb67e8
glibc@2.36-9+deb12u9
no fix listed
1
baserow/web-frontend:2.3.3566d24c7d9f5
glibc@2.41-12+deb13u3
no fix listed
1
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
glibc@2.31-0ubuntu9.7
no fix listed
1
beanbag/reviewboard:latest6b840f546e1c
glibc@2.35-0ubuntu3.14
2.35-0ubuntu3.15
1
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
glibc@2.41-12+deb13u3
no fix listed
1
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
glibc@2.41-12
no fix listed
1
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
glibc@2.36-9+deb12u10
no fix listed
1
bicarus/elrond-rosetta:v1.3.50.0b1dab0721e1c
glibc@2.31-0ubuntu9.9
no fix listed
1
bicarus/mx-notifier:1.1.8bed688d16762
glibc@2.31-0ubuntu9.9
no fix listed
1
bitnamilegacy/cassandra:4.1.7-debian-12-r32b7a217999a1
glibc@2.36-9+deb12u9
no fix listed
1
bitnamilegacy/clickhouse:24.12.3-debian-12-r13cf6544f6c6c
glibc@2.36-9+deb12u9
no fix listed
1
bitnamilegacy/clickhouse:24.12.4c7e70bf1d3fb
glibc@2.36-9+deb12u9
no fix listed
1
bitnamilegacy/clickhouse:24.6.2-debian-12-r3dcc172c6c55f
glibc@2.36-9+deb12u7
no fix listed
1
bitnamilegacy/consul:1.21.4-debian-12-r133ae872fc99d
glibc@2.36-9+deb12u10
no fix listed
1
bitnamilegacy/elasticsearch:8.12.215d4647fd491
glibc@2.36-9+deb12u4
no fix listed
1
bitnamilegacy/elasticsearch:9.0.1-debian-12-r0e6f6ddcce2f1
glibc@2.36-9+deb12u10
no fix listed
1
bitnamilegacy/git:latest4b08d0c5af8d
glibc@2.36-9+deb12u10
no fix listed
1
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
glibc@2.36-9+deb12u9
no fix listed
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.