StackRadar

CVE-2026-75803

Critical

Advisory

Published 20 Aug 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.002
13th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,030
of 17,821 indexed, latest versions
Container images
3,355
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-75803 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 3,030 of 17,821 indexed charts deploy, on 3,355 images.

Affected packageAffected versionsFixed inImages
openssldeb3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+60 more3.0.2-0ubuntu1.29, 3.0.13-0ubuntu3.15, 3.5.5-1ubuntu3.5, 3.5.7-1~deb13u21,873
opensslapk3.3.1-r3, 3.3.2-r4, 3.3.2-r5, 3.3.3-r0+12 more3.3.7-r1, 3.5.8-r01,446
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed17
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl33.3.7-619
OSV records
ALPINE-CVE-2026-75803DEBIAN-CVE-2026-75803UBUNTU-CVE-2026-75803AZL-97935ECHO-f836-71cf-434b
Also known as
USN-8678-1, USN-8678-3

Charts affected

3,030 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

3,355 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
vcnngr/pnbackend:latesteaf44ad0ad1f
openssl@3.3.3-r0
3.3.7-r1
1
vcnngr/pnfrontend:latest4e4979ab8c41
openssl@3.5.1-r0
3.5.8-r0
1
vcnngr/telegram-login:latest1a849a997b6d
openssl@3.0.15-1~deb12u1
no fix listed
1
vcnngr/telegram-rebot:latest30f1f05e57a6
openssl@3.0.15-1~deb12u1
no fix listed
1
vectorim/element-web:v1.11.9613d0ea68d7ff
openssl@3.3.3-r0
3.3.7-r1
1
veecode/devportal-admin-ui:0.4.30c69fd286b489
openssl@3.0.16-1~deb12u1
no fix listed
1
velero/velero:v1.18.0e4d1e79be2ee
openssl@3.0.2-0ubuntu1.21
3.0.2-0ubuntu1.29
1
venturenox/redis:latest83b471c193ba
openssl@3.0.15-1~deb12u1
no fix listed
1
venturenox/sagawise:latestc11d32f18718
openssl@3.3.2-r4
3.3.7-r1
1
verapdf/rest:v1.30.2341359ac6af5
openssl@3.5.6-r0
3.5.8-r0
1
versity/versitygw:v1.0.145192635d0353
openssl@3.3.3-r0
3.3.7-r1
1
versity/versitygw:v1.6.0d6ec798f66ca
openssl@3.5.7-r0
3.5.8-r0
1
versity/versitygw:v1.1.0f730e0dbc1ef
openssl@3.5.4-r0
3.5.8-r0
1
victoriametrics/victoria-logs:v1.15.0-victorialogsd7435244eb19
openssl@3.3.3-r0
3.3.7-r1
1
victoriametrics/victoria-metrics:v1.120.0a1cb2f3dfd45
openssl@3.5.0-r0
3.5.8-r0
1
victoriametrics/vmestimator:v0.1.15a5097ab9d09e
openssl@3.5.7-r0
3.5.8-r0
1
vinanrra/7dtd-server:v0.4.4f9534490bd2b
nodejs@16.19.1-deb-1nodesource1
no fix listed
1
vineyardcloudnative/vineyard-operator:latest9d419aa18faa
openssl@3.0.13-1~deb12u1
no fix listed
1
visualregressiontracker/api:5.0.11941aeb8c8bf9
openssl@3.0.15-1~deb12u1
no fix listed
1
vlebediantsev/notes-admin-front:latest007c6670ff48
openssl@3.0.9-1
no fix listed
1
vlebediantsev/notes-project-front:latest945675fd2636
openssl@3.0.9-1
no fix listed
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
openssl@3.0.9-1
no fix listed
1
volcanosh/vc-controller-manager:v1.12.13815883c32f6
openssl@3.5.0-r0
3.5.8-r0
1
volcanosh/vc-controller-manager:v1.15.26a6bc2560d51
openssl@3.5.7-r0
3.5.8-r0
1
volcanosh/vc-scheduler:v1.15.2afab36286a17
openssl@3.5.7-r0
3.5.8-r0
1
volcanosh/vc-scheduler:v1.12.1b24ea8af2d16
openssl@3.5.0-r0
3.5.8-r0
1
volcanosh/vc-webhook-manager:v1.12.1f8b50088a732
openssl@3.5.0-r0
3.5.8-r0
1
voska/hass-mcp:latest7142a431e2c5
openssl@3.0.15-1~deb12u1
no fix listed
1
wait4x/wait4x:3.3.14dcd86307de1
openssl@3.3.3-r0
3.3.7-r1
1
wallarm/api-firewall:v0.9.64d45db0ff240
openssl@3.5.5-r0
3.5.8-r0
1
wallarm/api-gateway:0.2.0a3d4d2f780e8
openssl@3.0.18-1~deb12u2
no fix listed
1
wallarm/gateway-controller:0.4.09c6ed23e2f0e
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2
1
wallarm/node-helpers:6.10.1aecd88b24c51
openssl@3.5.5-r0
3.5.8-r0
1
wallarm/node-native-processing:0.23.07db2da8fce0b
openssl@3.5.5-r0
3.5.8-r0
1
wateim/lighthouse-launch:latest2520149ee574
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.29
1
wettyoss/wetty:latest7423b3d40ba2
openssl@3.5.7-r0
3.5.8-r0
1
wiktorn/overpass-api:latest9bb5f4a9b54c
openssl@3.0.20-1~deb12u2
no fix listed
1
wistefan/mvf:lateste0887302b2d8
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.29
1
wolveix/satisfactory-server:v1.9.1199be1064b18
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.29
1
wolveix/satisfactory-server:v1.9.9464d11e36e10
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.29
1
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
openssl@3.0.2-0ubuntu1.16
3.0.2-0ubuntu1.29
1
wsjbr/duplistatus:1.4.25e594f5f09f6
openssl@3.5.7-r0
3.5.8-r0
1
xeladock/mysql_dns:latest4baf531453f1
openssl@3.0.2-0ubuntu1
3.0.2-0ubuntu1.29
1
xeladock/nginx2:latestc259a67b1dff
openssl@3.0.2-0ubuntu1
3.0.2-0ubuntu1.29
1
xeotek/kadeck:6.3.439a3b37a17c5
openssl@3.0.2-0ubuntu1.20
3.0.2-0ubuntu1.29
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
openssl@3.0.13-1~deb12u1
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
openssl@3.0.13-1~deb12u1
no fix listed
1
ybucci/traefik-external-dns-operator:1.0.0f1fcc7c8d9fd
openssl@3.3.3-r0
3.3.7-r1
1
yetiplatform/bloomcheck:dev85683ddfccbb
openssl@3.3.3-r0
3.3.7-r1
1
yetiplatform/yeti:2.9.09bcbe2650a14
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.