CVE-2026-6791
CriticalAdvisory
Published 2 Jul 2026In the index since 5 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.0
- base score, highest
- EPSS
- 0.002
- 11th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 2,620
- of 17,790 indexed, latest versions
- Container images
- 2,675
- deployed by those charts
- Fix available
- 2 of 4
- affected packages
CVE-2026-6791 affecting package glibc 2.38-21
Carried by container images the latest versions of 2,620 of 17,790 indexed charts deploy, on 2,675 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| glibcdeb | 2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+62 more | 2.35-0ubuntu3.15, 2.39-0ubuntu8.9, 2.41-12+deb13u3+e2, 2.43-2ubuntu2.4 | 2,615 |
| glibcapk | 2.37-r6, 2.38-r6, 2.39-r7, 2.40-r1+10 more | 2.43-r10 | 30 |
| eglibcdeb | 2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 more | no fix listed | 7 |
| glibcrpm | 2.38-16.azl3, 2.38-18.azl3, 2.38-20.azl3 | no fix listed | 23 |
- OSV records
- CGA-pg7p-jc78-5qw9DEBIAN-CVE-2026-6791UBUNTU-CVE-2026-6791AZL-95492ECHO-9658-3093-2999
- Also known as
- CGA-q9rx-85qf-q76x, USN-8737-1, USN-8737-2
Charts affected
2,620 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| glpieftechcombr-glpiVerified publisher | 2.12.0 | 2 of 5See more | 4,415 |
| elastalert2elastalert2 | 2.31.0 | 1 of 1See more | 1,823 |
| elchi-stackelchi | 1.13.0 | 3 of 10See more | 15,540 |
| emqx-enterpriseemqx-operator | 6.3.0 | 1 of 1See more | 884 |
| enbuildenbuildVerified publisher | 0.0.50 | 5 of 6See more | 31,674 |
| kubevirtencircle360-ossVerified publisher | 0.2.1 | 1 of 1See more | 867 |
| roundcubeencircle360-ossVerified publisher | 0.8.3 | 1 of 1See more | 5,662 |
| eoapieoapiOfficialVerified publisher | 0.16.2 | 2 of 7See more | 6,453 |
| paraerudikaVerified publisher | 0.3.0 | 1 of 1See more | 1,130 |
| beaconchain-explorerethereum-helm-chartsVerified publisher | 0.1.6 | 1 of 2See more | 3,096 |
| besuethereum-helm-chartsVerified publisher | 1.1.4 | 1 of 2See more | 693 |
| erigonethereum-helm-chartsVerified publisher | 2.0.2 | 1 of 2See more | 1,129 |
| lighthouseethereum-helm-chartsVerified publisher | 1.1.9 | 1 of 2See more | 1,590 |
| rethethereum-helm-chartsVerified publisher | 0.1.9 | 1 of 2See more | 678 |
| iobrokereugen | 0.2.6 | 1 of 1See more | 11,530 |
| iperf3eugen | 0.2.2 | 1 of 1See more | 829 |
| mcrouterevryfs-ossVerified publisher | 0.4.0 | 1 of 2See more | 6,511 |
| akauntingf3k-techVerified publisher | 1.3121.0 | 1 of 4See more | 4,357 |
| cap-captcha-serverf3k-techVerified publisher | 0.21.0 | 1 of 1See more | 1,686 |
| recaptcha-v3-verifierf3k-techVerified publisher | 1.110.0 | 1 of 1See more | 1,225 |
| fastapi-microservice-appfast-api-microservice-app | 1.3.0 | 4 of 4See more | 9,655 |
| federidfederidOfficialVerified publisher | 0.1.2 | 1 of 1See more | 2,086 |
| taigafermosit | 0.0.11 | 2 of 7See more | 8,541 |
| zabbix-server-mysqlfermosit | 3.0.2 | 3 of 4See more | 12,989 |
| ferriskeyferriskey | 0.7.2 | 2 of 3See more | 3,308 |
| flink-operatorflink-operator | 0.1.1 | 1 of 2See more | 12,941 |
| rss-bridgegabe565Verified publisher | 0.5.2 | 1 of 1See more | 2,203 |
| bazarrgeek-cookbookVerified publisher | 10.6.2 | 1 of 1See more | 17,440 |
| games-on-whalesgeek-cookbookVerified publisher | 1.8.2 | 3 of 7See more | 35,444 |
| homebridgegeek-cookbookVerified publisher | 5.3.2 | 1 of 1See more | 15,728 |
| lazylibrariangeek-cookbookVerified publisher | 7.4.2 | 1 of 1See more | 11,680 |
| omada-controllergeek-cookbookVerified publisher | 4.4.2 | 1 of 1See more | 11,582 |
| ombigeek-cookbookVerified publisher | 11.5.2 | 1 of 1See more | 5,178 |
| protonmail-bridgegeek-cookbookVerified publisher | 5.4.2 | 1 of 1See more | 8,038 |
| prowlarrgeek-cookbookVerified publisher | 4.5.2 | 1 of 1See more | 11,602 |
| sabnzbdgeek-cookbookVerified publisher | 9.4.2 | 1 of 1See more | 10,275 |
| sonarrgeek-cookbookVerified publisher | 16.3.2 | 1 of 1See more | 13,098 |
| stashgeek-cookbookVerified publisher | 3.4.2 | 1 of 1See more | 15,917 |
| tdarrgeek-cookbookVerified publisher | 4.6.2 | 2 of 2See more | 31,185 |
| valheimgeek-cookbookVerified publisher | 4.4.2 | 1 of 1See more | 4,913 |
| wireguardgeek-cookbookVerified publisher | 1.4.2 | 1 of 1See more | 7,701 |
| gentrace-self-hostedgentrace-self-hostedVerified publisher | 0.1.3 | 2 of 9See more | 15,635 |
| ghostfolioghostfolioVerified publisher | 0.5.4 | 1 of 3See more | 3,145 |
| leantimegissilabs | 1.3.0 | 1 of 2See more | 6,462 |
| openbaogitlabVerified publisher | 0.18.1 | 1 of 1See more | 1,797 |
| gorules-brmsgorulesVerified publisher | 1.18.1 | 1 of 1See more | 326 |
| meta-monitoringgrafana | 1.3.0 | 1 of 2See more | 3,569 |
| greenkubegreenkubeVerified publisher | 0.3.0 | 1 of 3See more | 1,826 |
| ghostgroundhog2k | 0.212.12 | 1 of 1See more | 2,022 |
| growthbookgrowthbook | 5.0.1 | 1 of 2See more | 725 |
Container images carrying it
2,675 by charts deploying them
A fixed version is listed for 2 of the 4 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| opendatacube/ | 1b90cdf68831 | glibc | no fix listed | 1 |
| opendatacube/ | 80df355a660b | glibc | 2.35-0ubuntu3.15 | 1 |
| openebs/ | a39ef27ea28b | glibc | no fix listed | 1 |
| openelevation/ | 82fb21612e86 | glibc | no fix listed | 1 |
| openhab/ | bfd4a60e90da | glibc | no fix listed | 1 |
| openkm/ | 3bc465a7461b | glibc | no fix listed | 1 |
| openmined/ | b72f74a68b32 | glibc | 2.43-r10 | 1 |
| openmined/ | d11524a3854a | glibc | 2.43-r10 | 1 |
| opennode/ | 4c82b15d9042 | glibc | no fix listed | 1 |
| openpolicyagent/ | 6a58dea59933 | glibc | 2.43-r10 | 1 |
| openproject/ | 88dc1359dfb5 | glibc | no fix listed | 1 |
| openproject/ | 48952034215d | glibc | no fix listed | 1 |
| opensearchproject/ | 43b0cdaf26ed | glibc | no fix listed | 1 |
| openstackhelm/ | f728510bab3c | glibc | no fix listed | 1 |
| openstackhelm/ | e07d75953d2e | glibc | no fix listed | 1 |
| openthread/ | 7616b9d514de | glibc | 2.39-0ubuntu8.9 | 1 |
| openthread/ | f307f59f6432 | glibc | no fix listed | 1 |
| openvino/ | 1e7cd1d70cc1 | glibc | 2.39-0ubuntu8.9 | 1 |
| openvpn/ | 2253c10ec652 | glibc | 2.39-0ubuntu8.9 | 1 |
| openwhisk/ | c80dba0de3aa | glibc | no fix listed | 1 |
| opsmx11/ | 5c50ca123d88 | eglibc | no fix listed | 1 |
| otwld/ | d1954b759e47 | glibc | no fix listed | 1 |
| outlinewiki/ | 494dfb9249a6 | glibc | no fix listed | 1 |
| outlinewiki/ | 832051f039b4 | glibc | no fix listed | 1 |
| owncloud/ | 51d9b74fc2a8 | glibc | no fix listed | 1 |
| owncloud/ | 74c53d341076 | glibc | 2.35-0ubuntu3.15 | 1 |
| owncloud/ | b3f9efdcd7f7 | glibc | 2.35-0ubuntu3.15 | 1 |
| oxfordsemantic/ | db17910eb855 | glibc | no fix listed | 1 |
| oxfordsemantic/ | baf570ff968d | glibc | no fix listed | 1 |
| pangeo/ | 5fbe688a4f80 | glibc | 2.35-0ubuntu3.15 | 1 |
| passbolt/ | af3a620902a0 | glibc | no fix listed | 1 |
| payara/ | 31f1253f0cf8 | glibc | 2.35-0ubuntu3.15 | 1 |
| penpotapp/ | 47853d9bb9dd | glibc | 2.35-0ubuntu3.15 | 1 |
| penpotapp/ | 5c835ffd87ab | glibc | 2.35-0ubuntu3.15 | 1 |
| penpotapp/ | 72a8061e8806 | glibc | 2.43-2ubuntu2.4 | 1 |
| penpotapp/ | 84f3f07ead11 | glibc | 2.43-2ubuntu2.4 | 1 |
| pgvector/ | cf134a767f47 | glibc | no fix listed | 1 |
| phan2410/ | 9c6ed6de26ca | glibc | no fix listed | 1 |
| phan2410/ | 4a86d138832d | glibc | no fix listed | 1 |
| phntom/ | 51cf9da4aa2e | glibc | 2.35-0ubuntu3.15 | 1 |
| photoprism/ | 2954334adbda | glibc | 2.35-0ubuntu3.15 | 1 |
| photoprism/ | 650c6ad5a651 | glibc | 2.43-2ubuntu2.4 | 1 |
| photoprism/ | 958642220223 | glibc | 2.43-2ubuntu2.4 | 1 |
| photoprism/ | fc6fd632ca74 | glibc | 2.39-0ubuntu8.9 | 1 |
| phpmyadmin/ | 42a200db07b4 | glibc | no fix listed | 1 |
| pk910/ | 3dcae6a62896 | glibc | no fix listed | 1 |
| plantuml/ | 5f6f99ec2fc1 | glibc | 2.39-0ubuntu8.9 | 1 |
| platform9community/ | de3fa9b70df1 | glibc | no fix listed | 1 |
| platform9community/ | 40a4970de568 | glibc | no fix listed | 1 |
| platform9community/ | 2089811e5cc6 | glibc | no fix listed | 1 |