StackRadar

CVE-2026-6791

Critical

Advisory

Published 2 Jul 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.0
base score, highest
EPSS
0.002
11th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,638
of 17,828 indexed, latest versions
Container images
2,704
deployed by those charts
Fix available
2 of 4
affected packages

CVE-2026-6791 affecting package glibc 2.38-21

Carried by container images the latest versions of 2,638 of 17,828 indexed charts deploy, on 2,704 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+63 more2.35-0ubuntu3.15, 2.39-0ubuntu8.9, 2.41-12+deb13u3+e2, 2.43-2ubuntu2.42,654
glibcapk2.37-r6, 2.38-r6, 2.39-r7, 2.40-r1+10 more2.43-r1029
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
glibcrpm2.38-16.azl3, 2.38-18.azl3, 2.38-20.azl3no fix listed14
OSV records
CGA-pg7p-jc78-5qw9DEBIAN-CVE-2026-6791UBUNTU-CVE-2026-6791AZL-95492ECHO-9658-3093-2999
Also known as
CGA-q9rx-85qf-q76x, USN-8737-1, USN-8737-2

Charts affected

2,638 by stars
ChartLatestAffected imagesRadar Score
akto-ai-guardrails-v2akto0.3.05 of 6See more

akto-ai-guardrails-v2 akto 0.3.0

5 of the 6 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
aktosecurity/akto-agent-guard-anonymizer:1.1.4d4b100cbdc47
glibc@2.41-12+deb13u3
no fix listed
aktosecurity/akto-agent-guard-embedder:1.1.4dbc566b2376c
glibc@2.41-12+deb13u3
no fix listed
aktosecurity/akto-agent-guard-worker:1.1.4666eaffd5362
glibc@2.41-12+deb13u3
no fix listed
aktosecurity/data-ingestion-service:1.4.946ed5bcb04b2
glibc@2.43-2ubuntu2
2.43-2ubuntu2.4
redis/redis-stack-server:7.4.0-v172035434f455
glibc@2.35-0ubuntu3.8
2.35-0ubuntu3.15

Open the chart page →

42,391
akto-central-setupakto1.1.103 of 5See more

akto-central-setup akto 1.1.10

3 of the 5 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
aktosecurity/akto-threat-detection-backend:1.15.7a6c1b933517f
glibc@2.43-2ubuntu2.3
2.43-2ubuntu2.4
public.ecr.aws/aktosecurity/akto-api-security-dashboard:1.69.2b53a854bd7c1
glibc@2.39-0ubuntu8.8
2.39-0ubuntu8.9
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:1.66.9138c8b82c398
glibc@2.39-0ubuntu8.8
2.39-0ubuntu8.9

Open the chart page →

5,258
akto-dashboardakto0.1.71 of 1See more

akto-dashboard akto 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
aktosecurity/akto-api-security-dashboard:latest3aeaee66bc66
glibc@2.39-0ubuntu8.8
2.39-0ubuntu8.9

Open the chart page →

1,231
akto-dbabsakto0.1.91 of 1See more

akto-dbabs akto 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:latestf669a6eacf8c
glibc@2.39-0ubuntu8.8
2.39-0ubuntu8.9

Open the chart page →

1,194
akto-mini-runtimeakto0.7.222 of 3See more

akto-mini-runtime akto 0.7.22

2 of the 3 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:latest8be3ed26f746
glibc@2.43-2ubuntu2.3
2.43-2ubuntu2.4
public.ecr.aws/aktosecurity/redis:latestV8.6.2832d7785830f
glibc@2.41-12+deb13u2
no fix listed

Open the chart page →

2,900
akto-mini-runtime-shaakto0.7.231 of 3See more

akto-mini-runtime-sha akto 0.7.23

1 of the 3 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/redisdigest-pinned47200b041382
glibc@2.36-9+deb12u13
no fix listed

Open the chart page →

3,310
akto-mini-testingakto1.45.72 of 5See more

akto-mini-testing akto 1.45.7

2 of the 5 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-ai-automated-testing:latest5a5d32281374
glibc@2.36-9+deb12u14
no fix listed
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:1.72.6_local43316f900242
glibc@2.43-2ubuntu2.3
2.43-2ubuntu2.4

Open the chart page →

6,660
akto-runtimeakto0.1.81 of 2See more

akto-runtime akto 0.1.8

1 of the 2 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:latest5d55a742a2bc
glibc@2.43-2ubuntu2.3
2.43-2ubuntu2.4

Open the chart page →

1,513
akto-threat-backendakto0.1.51 of 2See more

akto-threat-backend akto 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
aktosecurity/akto-threat-detection-backend:latest15ebb75b94dc
glibc@2.43-2ubuntu2.3
2.43-2ubuntu2.4

Open the chart page →

1,592
akto-threat-clientakto0.2.01 of 2See more

akto-threat-client akto 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-threat-detection:latest3f103ce347ce
glibc@2.43-2ubuntu2.3
2.43-2ubuntu2.4

Open the chart page →

1,625
data-ingestion-serviceakto0.1.61 of 1See more

data-ingestion-service akto 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
aktosecurity/data-ingestion-servicedigest-pinned213aded7adc5
glibc@2.39-0ubuntu8.6
2.39-0ubuntu8.9

Open the chart page →

58,289
browserlessalekcVerified publisher1.2.71 of 1See more

browserless alekc 1.2.7

1 of the 1 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
ghcr.io/browserless/chrome:v2.56.7d600eac6283f
glibc@2.39-0ubuntu8.8
2.39-0ubuntu8.9

Open the chart page →

2,138
esphomealekcVerified publisher2.9.01 of 1See more

esphome alekc 2.9.0

1 of the 1 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
esphome/esphome:2026.9.09959730a04c7
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

3,245
komodoalekcVerified publisher3.1.01 of 1See more

komodo alekc 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
ghcr.io/moghtech/komodo-core:2.3.3bca73d0eee14
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,869
alertigatealertigate0.6.01 of 1See more

alertigate alertigate 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
ghcr.io/feresberbeche/alertigate:2.0.07b9bba80f207
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,365
esphomealexmorbo-esphomeVerified publisher1.0.01 of 1See more

esphome alexmorbo-esphome 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
esphome/esphome:2024.12.2b2c6322700ac
glibc@2.36-9+deb12u3
no fix listed

Open the chart page →

6,401
flaresolverralexmorbo-flaresolverrVerified publisher0.2.01 of 1See more

flaresolverr alexmorbo-flaresolverr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

27,831
slskdalexmorbo-slskdVerified publisher0.3.01 of 1See more

slskd alexmorbo-slskd 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
ghcr.io/slskd/slskd:0.25.1ab9ed50e028b
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.9

Open the chart page →

1,756
tubearchivistalexmorbo-tubearchivistVerified publisher0.1.01 of 2See more

tubearchivist alexmorbo-tubearchivist 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
valkey/valkey:9.0.1546304417fea
glibc@2.41-12
no fix listed

Open the chart page →

1,627
nginx-sni-proxyalexpressoVerified publisher1.0.21 of 1See more

nginx-sni-proxy alexpresso 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
glibc@2.41-12+deb13u4
no fix listed

Open the chart page →

1,593
redisalexvanderberkelVerified publisher2.2.01 of 1See more

redis alexvanderberkel 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
library/redis:8.2.15fa2edb1e408
glibc@2.36-9+deb12u13
no fix listed

Open the chart page →

1,903
alibaba-rsocket-brokeralibaba-rsocket-brokerVerified publisher0.1.31 of 1See more

alibaba-rsocket-broker alibaba-rsocket-broker 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
linuxchina/alibaba-rsocket-broker:1.1.3-k8sf758e2e567ee
glibc@2.27-3ubuntu1.5
no fix listed

Open the chart page →

92,754
allure-docker-helm-chartallure-service-chartVerified publisher0.1.01 of 2See more

allure-docker-helm-chart allure-service-chart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:latestdc171ec796d5
glibc@2.39-0ubuntu8.7
2.39-0ubuntu8.9

Open the chart page →

3,718
katalogalpineworks0.1.21 of 5See more

katalog alpineworks 0.1.2

1 of the 5 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/katalog-migrations:v1.0.562c44a384e13
glibc@2.36-9+deb12u9
no fix listed

Open the chart page →

4,577
pagesalstom-pages-app1.0.02 of 3See more

pages alstom-pages-app 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
glibc@2.31-0ubuntu9.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
glibc@2.27-3ubuntu1
no fix listed

Open the chart page →

20,287
amorphieamorphie0.1.22 of 18See more

amorphie amorphie 0.1.2

2 of the 18 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
camunda/zeebe:8.4.5ab5abc09e407
glibc@2.35-0ubuntu3.6
2.35-0ubuntu3.15
ghcr.io/camunda-community-hub/zeebe-simple-monitor:2.6.2d9d796a1b846
glibc@2.35-0ubuntu3.5
2.35-0ubuntu3.15

Open the chart page →

28,438
anchore-admission-controlleranchore-charts0.9.01 of 2See more

anchore-admission-controller anchore-charts 0.9.0

1 of the 2 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
cfssl/cfssl:v1.6.5c9018c2ddf0b
glibc@2.36-9+deb12u4
no fix listed

Open the chart page →

7,547
music-assistant-serverandibraeuVerified publisher2.1.21 of 1See more

music-assistant-server andibraeu 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

5,814
stalwartandibraeuVerified publisher1.0.21 of 1See more

stalwart andibraeu 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.16.1425001929f36a
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,636
pagesandrei-pages1.0.02 of 3See more

pages andrei-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
glibc@2.31-0ubuntu9.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
glibc@2.27-3ubuntu1
no fix listed

Open the chart page →

20,287
omada-controllerandrelote-k8sVerified publisher4.5.01 of 1See more

omada-controller andrelote-k8s 4.5.0

1 of the 1 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
glibc@2.27-3ubuntu1.6
no fix listed

Open the chart page →

11,623
mathesarandrenarchyVerified publisher1.8.01 of 1See more

mathesar andrenarchy 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
mathesar/mathesar:0.12.0091757cb01fe
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

7,330
speech-to-phraseandrenarchyVerified publisher1.3.01 of 1See more

speech-to-phrase andrenarchy 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
rhasspy/wyoming-speech-to-phrase:1.4.3e532f0dbc6b2
glibc@2.36-9+deb12u13
no fix listed

Open the chart page →

4,107
games-on-whalesangelnu2.0.04 of 7See more

games-on-whales angelnu 2.0.0

4 of the 7 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
glibc@2.35-0ubuntu3.10
2.35-0ubuntu3.15
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
glibc@2.31-0ubuntu9.2
no fix listed
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
glibc@2.31-0ubuntu9.2
no fix listed
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
glibc@2.31-0ubuntu9.2
no fix listed

Open the chart page →

118,418
ansible-inspecansible-inspec0.2.171 of 2See more

ansible-inspec ansible-inspec 0.2.17

1 of the 2 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
glibc@2.41-12+deb13u1
no fix listed

Open the chart page →

5,697
ddosifyanteonVerified publisher1.7.52 of 13See more

ddosify anteon 1.7.5

2 of the 13 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
glibc@2.36-9+deb12u4
no fix listed
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
glibc@2.36-9+deb12u4
no fix listed

Open the chart page →

26,169
antigenic-stalwart-helm-chartantigenic-stalwart-helm-chartVerified publisher1.0.51 of 2See more

antigenic-stalwart-helm-chart antigenic-stalwart-helm-chart 1.0.5

1 of the 2 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.15.5dcf575db2d53
glibc@2.41-12+deb13u1
no fix listed

Open the chart page →

1,489
antmediaantmediaVerified publisher3.1.01 of 4See more

antmedia antmedia 3.1.0

1 of the 4 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
library/mongo:8.002a0cc7939f5
glibc@2.39-0ubuntu8.8
2.39-0ubuntu8.9

Open the chart page →

4,644
antrea-uiantreaVerified publisher0.8.01 of 2See more

antrea-ui antrea 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
antrea/antrea-ui-frontend:v0.8.0ee9686bcefb8
glibc@2.41-12+deb13u2
no fix listed

Open the chart page →

3,385
flow-aggregatorantreaVerified publisher2.7.01 of 1See more

flow-aggregator antrea 2.7.0

1 of the 1 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
antrea/flow-aggregator:v2.7.0065193e7572f
glibc@2.39-0ubuntu8.8
2.39-0ubuntu8.9

Open the chart page →

794
glauthanza-labsVerified publisher1.0.11 of 1See more

glauth anza-labs 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
ghcr.io/glauth/glauth:v2.5.209c782ca5984
glibc@2.41-12+deb13u3
no fix listed

Open the chart page →

1,245
apispringbootHelmapispringboot0.1.01 of 1See more

apispringbootHelm apispringboot 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
rabeh/apibootspring:1.0941007b6946e
glibc@2.35-0ubuntu3.4
2.35-0ubuntu3.15

Open the chart page →

6,304
d.vazquezm.2021_helmapphelmVerified publisher1.0.01 of 6See more

d.vazquezm.2021_helm apphelm 1.0.0

1 of the 6 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
library/mongo:5.0.6-focal8e70544b6c76
glibc@2.31-0ubuntu9.7
no fix listed

Open the chart page →

19,832
accounts-uiappscodeVerified publisher2026.9.111 of 1See more

accounts-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

2,635
aceappscodeVerified publisher2026.9.111 of 2See more

ace appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

2,937
ace-installerappscodeVerified publisher2026.9.111 of 2See more

ace-installer appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

3,293
ace-installer-certifiedappscodeVerified publisher2026.9.111 of 2See more

ace-installer-certified appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1178a9fb785ec5
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

3,143
billingappscodeVerified publisher2026.9.111 of 1See more

billing appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

2,635
cert-manager-csi-driver-cacertsappscodeVerified publisher2026.9.181 of 3See more

cert-manager-csi-driver-cacerts appscode 2026.9.18

1 of the 3 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
ghcr.io/appscode/csi-driver-cacerts:v0.6.0ab213b156017
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

2,516
crd-managerappscodeVerified publisher2026.7.211 of 1See more

crd-manager appscode 2026.7.21

1 of the 1 container images this version deploys carry CVE-2026-6791.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/crd-manager:v0.3.0e67f14e5c853
glibc@2.36-9+deb12u14
no fix listed

Open the chart page →

813

Container images carrying it

2,704 by charts deploying them

A fixed version is listed for 2 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
glibc@2.36-9+deb12u10
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
glibc@2.36-9+deb12u14
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
glibc@2.36-9+deb12u14
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
glibc@2.36-9+deb12u10
no fix listed
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.