CVE-2026-6791

Critical

Advisory

Published 2 Jul 2026In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.0; base score, highest
EPSS: 0.002; 11th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,605; of 17,797 indexed, latest versions
Container images: 2,653; deployed by those charts
Fix available: 2 of 4; affected packages

CVE-2026-6791 affecting package glibc 2.38-21

Carried by container images the latest versions of 2,605 of 17,797 indexed charts deploy, on 2,653 images.

Affected package	Affected versions	Fixed in	Images
glibcdeb	2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+63 more	2.35-0ubuntu3.15, 2.39-0ubuntu8.9, 2.41-12+deb13u3+e2, 2.43-2ubuntu2.4	2,593
glibcapk	2.37-r6, 2.38-r6, 2.39-r7, 2.40-r1+10 more	2.43-r10	30
eglibcdeb	2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 more	no fix listed	7
glibcrpm	2.38-16.azl3, 2.38-18.azl3, 2.38-20.azl3	no fix listed	23

OSV records: CGA-pg7p-jc78-5qw9 DEBIAN-CVE-2026-6791 UBUNTU-CVE-2026-6791 AZL-95492 ECHO-9658-3093-2999
Also known as: CGA-q9rx-85qf-q76x, USN-8737-1, USN-8737-2

Charts affected

2,605 by stars

Chart

Latest

Affected images

Radar Score

changedetection-iozekker6

1.101.0

1 See more

changedetection-io zekker6 1.101.0

1 container image this version deploys carries CVE-2026-6791.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.6	eb4a9f718801	glibc@2.36-9+deb12u14	no fix listed

Open the chart page →

—

endlessh-gozekker6

0.4.0

1 of 1 See more

endlessh-go zekker6 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-6791.

Container image	Digest	Package	Fixed in
ghcr.io/shizunge/endlessh-go :2026.0730.0	8826dad32623	glibc@2.41-12+deb13u3	no fix listed

Open the chart page →

485

NEW_APPzekker6

0.0.0

1 of 1 See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-6791.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	glibc@2.41-12+deb13u3	no fix listed

Open the chart page →

1,861

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-6791.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	glibc@2.27-3ubuntu1.4	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	glibc@2.31-0ubuntu9.2	no fix listed

Open the chart page →

9,272

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-6791.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	glibc@2.35-0ubuntu3.14	2.35-0ubuntu3.15

Open the chart page →

7,936

Container images carrying it

2,653 by charts deploying them

A fixed version is listed for 2 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/mongo :4.4-bionic	3d0e6df9fd5b	glibc@2.27-3ubuntu1.4	no fix listed	1
library/mongo :7.0-jammy :7-jammy	406a4fdca9fc	glibc@2.35-0ubuntu3.14	2.35-0ubuntu3.15	1
library/mongo :5.0.14-focal	50cae5081ab4	glibc@2.31-0ubuntu9.9	no fix listed	1
library/mongo :6.0.12	646902910d6a	glibc@2.35-0ubuntu3.6	2.35-0ubuntu3.15	1
library/mongo :4.2	699d652ed674	glibc@2.27-3ubuntu1.6	no fix listed	1
library/mongo :4.2.1	6ca49afbcb2b	glibc@2.27-3ubuntu1	no fix listed	1
library/mongo :noble	6ede2806c78e	glibc@2.39-0ubuntu8.8	2.39-0ubuntu8.9	1
library/mongo :6.0.2	71a63fc2438e	glibc@2.31-0ubuntu9.9	no fix listed	1
library/mongo :5.0.21	7c81758cb295	glibc@2.31-0ubuntu9.12	no fix listed	1
library/mongo :7.0-jammy	84c4a18b60a0	glibc@2.35-0ubuntu3.14	2.35-0ubuntu3.15	1
library/mongo :7.0.28-jammy	88785f6f665a	glibc@2.35-0ubuntu3.11	2.35-0ubuntu3.15	1
library/mongo :4.2.21-bionic	9cb28f7291d9	glibc@2.27-3ubuntu1.6	no fix listed	1
library/mongo :7.0.12	ae1cf99fa7bf	glibc@2.35-0ubuntu3.8	2.35-0ubuntu3.15	1
library/mongo :4.4.18	d23ec07162ca	glibc@2.31-0ubuntu9.9	no fix listed	1
library/mongo :8.0.11	dca8d11fe467	glibc@2.39-0ubuntu8.5	2.39-0ubuntu8.9	1
library/mysql :8.0-debian	9382e4f6f7f0	glibc@2.36-9+deb12u13	no fix listed	1
library/neo4j :2026.05.0-enterprise	2caf944aa4a5	glibc@2.41-12+deb13u3	no fix listed	1
library/neo4j :2026.02.2	5ab4ab0358cf	glibc@2.41-12+deb13u2	no fix listed	1
library/neo4j :2026.05.0	6c162e2432f8	glibc@2.41-12+deb13u3	no fix listed	1
library/nextcloud :31.0.6-apache	588609d76b21	glibc@2.36-9+deb12u10	no fix listed	1
library/nextcloud :34.0.4 :34.0.4-apache	8418c398d767	glibc@2.41-12+deb13u4	no fix listed	1
library/nextcloud :31.0.10-apache	b7faa1653c39	glibc@2.41-12	no fix listed	1
library/nextcloud :34.0.3 :34.0.3-apache	b97df9e0e1ee	glibc@2.41-12+deb13u3	no fix listed	1
library/nextcloud :34.0.4-apache	de4ad9389386	glibc@2.41-12+deb13u3	no fix listed	1
library/nginx :1.27.4	09369da6b103	glibc@2.36-9+deb12u10	no fix listed	1
library/nginx :1.29	1881968aff6f	glibc@2.41-12+deb13u2	no fix listed	1
library/nginx :1.27	6784fb0834aa	glibc@2.36-9+deb12u10	no fix listed	1
library/nginx :1.25.1	67f9a4f10d14	glibc@2.36-9+deb12u1	no fix listed	1
library/nginx :1.25.4	9ff236ed47fe	glibc@2.36-9+deb12u4	no fix listed	1
library/nginx :1.31	a53fc6c27208	glibc@2.41-12+deb13u3	no fix listed	1
library/nginx :1.27.3	fb197595ebe7	glibc@2.36-9+deb12u9	no fix listed	1
library/node :22-bookworm-slim	83f487e0a634	glibc@2.36-9+deb12u14	no fix listed	1
library/node :20	8f693eaa7e0a	glibc@2.36-9+deb12u13	no fix listed	1
library/node :latest	f5d1cc40abc1	glibc@2.41-12+deb13u3	no fix listed	1
library/php :8.4-fpm	59fa733c9af6	glibc@2.41-12+deb13u3	no fix listed	1
library/postgres :18.0	073e7c8b84e2	glibc@2.41-12	no fix listed	1
library/postgres :17.4	304ab8135187	glibc@2.36-9+deb12u10	no fix listed	1
library/postgres :18.4	3a82e1f56c8f	glibc@2.41-12+deb13u3	no fix listed	1
library/postgres :16.11	468e1f126ca5	glibc@2.41-12+deb13u1	no fix listed	1
library/postgres :16.6	557fea37a744	glibc@2.36-9+deb12u9	no fix listed	1
library/postgres :18.3	69e8582b781c	glibc@2.41-12+deb13u1	no fix listed	1
library/postgres :15.18	6eb0add3b77c	glibc@2.41-12+deb13u3	no fix listed	1
library/postgres :15.3	8775adb39f0d	glibc@2.36-9+deb12u1	no fix listed	1
library/postgres :18.4	8ff36f3c6637	glibc@2.41-12+deb13u3	no fix listed	1
library/postgres :18.3	a9abf4275f9e	glibc@2.41-12+deb13u2	no fix listed	1
library/postgres :17.5	aadf2c0696f5	glibc@2.41-12	no fix listed	1
library/postgres :13.12	ced3ba927f4c	glibc@2.36-9+deb12u3	no fix listed	1
library/postgres :15.18-bookworm	e8db9bd3e9e1	glibc@2.36-9+deb12u14	no fix listed	1
library/postgres :14.22	eba8ddbdd837	glibc@2.41-12+deb13u2	no fix listed	1
library/postgres :17.10	ebba4f4de37f	glibc@2.41-12+deb13u3	no fix listed	1