StackRadar

CVE-2026-75803

Critical

Advisory

Published 20 Aug 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.002
13th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,050
of 17,803 indexed, latest versions
Container images
3,356
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-75803 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 3,050 of 17,803 indexed charts deploy, on 3,356 images.

Affected packageAffected versionsFixed inImages
openssldeb3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+61 more3.0.2-0ubuntu1.29, 3.0.13-0ubuntu3.15, 3.5.5-1ubuntu3.5, 3.5.7-1~deb13u21,865
opensslapk3.3.1-r3, 3.3.2-r4, 3.3.2-r5, 3.3.3-r0+12 more3.3.7-r1, 3.5.8-r01,457
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+3 moreno fix listed11
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl33.3.7-623
OSV records
ALPINE-CVE-2026-75803DEBIAN-CVE-2026-75803UBUNTU-CVE-2026-75803AZL-97935ECHO-f836-71cf-434b
Also known as
USN-8678-1, USN-8678-3

Charts affected

3,050 by stars
ChartLatestAffected imagesRadar Score
guacamoledmunozv04Verified publisher0.3.41 of 2See more

guacamole dmunozv04 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
guacamole/guacamole:1.6.0f344085e618b
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15

Open the chart page →

3,728
hdfsgaffer2.2.11 of 2See more

hdfs gaffer 2.2.1

1 of the 2 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.15

Open the chart page →

5,455
hcloud-csihcloud2.23.01 of 6See more

hcloud-csi hcloud 2.23.0

1 of the 6 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
hetznercloud/hcloud-csi-driver:v2.23.0024ea4b07161
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

2,689
envoy-gatewayhelmforgeVerified publisher2.1.02 of 3See more

envoy-gateway helmforge 2.1.0

2 of the 3 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
helmforge/kubectl:1.35.3c3f97e954c47
openssl@3.5.5-r0
3.5.8-r0
mccutchen/go-httpbin:v2.15.024528cf5229d
openssl@3.0.14-1~deb12u2
no fix listed

Open the chart page →

2,444
n8nhelmforgeVerified publisher2.0.11 of 2See more

n8n helmforge 2.0.1

1 of the 2 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
n8nio/n8n:2.39.5cfa04788a34a
openssl@3.5.7-r1
3.5.8-r0

Open the chart page →

810
ilumilumOfficialVerified publisher6.7.36 of 19See more

ilum ilum 6.7.3

6 of the 19 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
alpine/kubectl:1.34.18413f8890d19
openssl@3.5.4-r0
3.5.8-r0
bitnamilegacy/minio:2025.3.12-debian-12-r0ba9f3b4b0b00
openssl@3.0.15-1~deb12u1
no fix listed
bitnamilegacy/postgresql:16233f361c5819
openssl@3.0.15-1~deb12u1
no fix listed
ilum/api:6.7.3624fd09528c8
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ilum/marquez:0.54.06e1d709d41f8
openssl@3.0.18-1~deb12u2
no fix listed
ilum/ui:6.7.3998937726679
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

23,599
syncthingk8s-home-lab-repo5.2.01 of 1See more

syncthing k8s-home-lab-repo 5.2.0

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
syncthing/syncthing:2.1.1775c4aac4862
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,224
kafkakafka18.0.11 of 1See more

kafka kafka 18.0.1

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.15

Open the chart page →

3,454
lakekeeperlakekeeperVerified publisher0.12.01 of 2See more

lakekeeper lakekeeper 0.12.0

1 of the 2 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

2,006
litmuslitmuschaos3.30.02 of 6See more

litmus litmuschaos 3.30.0

2 of the 6 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:8.0.13-debian-12-r02579e968033e
openssl@3.0.17-1~deb12u2
no fix listed
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
openssl@3.0.17-1~deb12u2
no fix listed

Open the chart page →

7,446
homepagem0nsterrr-homepageVerified publisher5.4.01 of 1See more

homepage m0nsterrr-homepage 5.4.0

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
ghcr.io/gethomepage/homepage:v2.4.0643bd0be730d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

345
monicamonicaOfficialVerified publisher1.0.151 of 1See more

monica monica 1.0.15

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
ghcr.io/monicahq/monica-next:main8be69156acbb
openssl@3.5.1-1
3.5.7-1~deb13u2

Open the chart page →

5,750
nautobotnautobotOfficialVerified publisher3.1.21 of 1See more

nautobot nautobot 3.1.2

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
networktocode/nautobot:3.0-py3.13ed484336b1ad
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

4,507
netris-controllernetrisai2.8.21 of 14See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
netrisai/controller-web-service-frontend:4.6.0-0138c5074f55ae5
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

30,559
ntfyntfyVerified publisher0.5.221 of 1See more

ntfy ntfy 0.5.22

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
binwiederhier/ntfy:v2.28.06ef4b819f722
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

165
smtpntppoolVerified publisher2.4.01 of 1See more

smtp ntppool 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
ghcr.io/egos-tech/smtp:1.2.2b5451793ad91
openssl@3.5.5-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

2,379
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
library/postgres:16.109f23e02d766
openssl@3.0.11-1~deb12u2
no fix listed

Open the chart page →

17,465
paperless-ngxpaperless-ngxVerified publisher0.3.221 of 3See more

paperless-ngx paperless-ngx 0.3.22

1 of the 3 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
openssl@3.0.17-1~deb12u2
no fix listed

Open the chart page →

8,644
prowlarrpree-helm-chartsVerified publisher1.60.01 of 1See more

prowlarr pree-helm-charts 1.60.0

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
ghcr.io/home-operations/prowlarr:2.6.5.56236152751c3ea2
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
prometheus-nats-exporterprometheus-communityVerified publisher2.23.21 of 1See more

prometheus-nats-exporter prometheus-community 2.23.2

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
natsio/prometheus-nats-exporter:0.20.2c623b608e148
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

165
puppetserverpuppetserver9.5.22 of 5See more

puppetserver puppetserver 9.5.2

2 of the 5 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.29
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.29

Open the chart page →

14,524
elasticsearch-clusterwiremindVerified publisher4.5.21 of 2See more

elasticsearch-cluster wiremind 4.5.2

1 of the 2 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
library/elasticsearch:8.19.1289729a95066a
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.15

Open the chart page →

2,338
istio-operatorwiremindVerified publisher1.18.21 of 1See more

istio-operator wiremind 1.18.2

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
istio/operator:1.18.270f9d1fe5fff
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.29

Open the chart page →

5,690
zigbee2mqttzigbee2mqtt2.14.12 of 2See more

zigbee2mqtt zigbee2mqtt 2.14.1

2 of the 2 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
koenkk/zigbee2mqtt:2.14.1fef0de769dcd
openssl@3.5.7-r0
3.5.8-r0
mikefarah/yq:4.45.12c100efaca06
openssl@3.3.2-r4
3.3.7-r1

Open the chart page →

1,177
home-assistantalekcVerified publisher2.11.21 of 1See more

home-assistant alekc 2.11.2

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

2,145
phpmyadminalekcVerified publisher0.3.11 of 1See more

phpmyadmin alekc 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apache3a8a8d6b5289
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

2,695
home-assistantandrenarchyVerified publisher14.104.01 of 1See more

home-assistant andrenarchy 14.104.0

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

2,145
crowdatlassian-data-centerVerified publisher2.0.151 of 2See more

crowd atlassian-data-center 2.0.15

1 of the 2 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
library/alpine:latest28bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,556
wazuh-agentavistoVerified publisher4.12.21 of 1See more

wazuh-agent avisto 4.12.2

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
openssl@3.0.16-1~deb12u1
no fix listed

Open the chart page →

6,556
memcachedcloudpirates-memcachedVerified publisher0.14.91 of 1See more

memcached cloudpirates-memcached 0.14.9

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
library/memcached:1.6.4575c93cc91e76
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,100
cluster-secretclutersecretVerified publisher0.7.01 of 1See more

cluster-secret clutersecret 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
quay.io/clustersecret/clustersecret:0.0.14a9f835d1b241
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

3,076
convoyconvoyVerified publisher3.7.132 of 3See more

convoy convoy 3.7.13

2 of the 3 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
openssl@3.0.17-1~deb12u2
no fix listed
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
openssl@3.0.17-1~deb12u2
no fix listed

Open the chart page →

6,128
cortexcortex3.3.82 of 4See more

cortex cortex 3.3.8

2 of the 4 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
library/memcached:1.6.4575c93cc91e76
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
quay.io/cortexproject/cortex:v1.21.18577eb292a01
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

4,014
emqx-operatoremqx-operator2.3.21 of 2See more

emqx-operator emqx-operator 2.3.2

1 of the 2 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
alpine/k8s:1.31.49c4976d47656
openssl@3.3.2-r4
3.3.7-r1

Open the chart page →

4,706
gethethereum-helm-chartsVerified publisher1.1.41 of 2See more

geth ethereum-helm-charts 1.1.4

1 of the 2 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
ethereum/client-go:stableb8ab3451a117
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

633
bookstackgabe565Verified publisher0.20.01 of 1See more

bookstack gabe565 0.20.0

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
openssl@3.3.3-r0
3.3.7-r1

Open the chart page →

2,959
grayloggraylog2OfficialVerified publisher2.0.01 of 2See more

graylog graylog2 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
graylog/graylog-enterprise:7.1.88a1f641cd7aa
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15

Open the chart page →

1,576
hasurahasura-extraVerified publisher3.0.11 of 1See more

hasura hasura-extra 3.0.1

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
hasura/graphql-engine:v2.34.0-ce0111b0204136
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.29

Open the chart page →

4,979
docmosthelmforgeVerified publisher1.2.122 of 4See more

docmost helmforge 1.2.12

2 of the 4 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
library/redis:8.10.1298e5b3bc566
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

4,206
piholehelmforgeVerified publisher2.0.131 of 1See more

pihole helmforge 2.0.13

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
pihole/pihole:2026.07.2f7d1be836e3b
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

571
wordpresshelmforgeVerified publisher3.0.61 of 3See more

wordpress helmforge 3.0.6

1 of the 3 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
library/wordpress:7.1.0-apache5a93c470ae82
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

4,261
coturnjaconiVerified publisher1.0.51 of 1See more

coturn jaconi 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
coturn/coturn:4.10.0-r1f4c2af06c3c5
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

3,105
jellyfinloeken-at-homeVerified publisher10.11.81 of 1See more

jellyfin loeken-at-home 10.11.8

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
loeken/jellyfin:10.11.87efbc24e47b0
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

889
mercuremercureOfficialVerified publisher1.0.01 of 1See more

mercure mercure 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
dunglas/mercure:v1.0.033223c37ec29
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

650
meshery-operatormesheryOfficialVerified publisher1.0.701 of 2See more

meshery-operator meshery 1.0.70

1 of the 2 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
alpine/k8s:1.35.6b7a12c5ddf26
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

2,461
mongooseimmongoose0.4.111 of 1See more

mongooseim mongoose 0.4.11

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
erlangsolutions/mongooseim:6.6.0cc5bf032931f
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.15

Open the chart page →

1,321
jira-softwaremoxVerified publisher2.7.11 of 3See more

jira-software mox 2.7.1

1 of the 3 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
atlassian/jira-software:9.7.264a75aa4ec4e
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15

Open the chart page →

8,704
technitium-dnsserverobeoneVerified publisher1.13.01 of 1See more

technitium-dnsserver obeone 1.13.0

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
technitium/dns-server:15.4.0df7d90ef0f7b
openssl@3.0.13-0ubuntu3.11
3.0.13-0ubuntu3.15

Open the chart page →

1,365
opencostopencost-ociOfficialVerified publisher2.5.311 of 2See more

opencost opencost-oci 2.5.31

1 of the 2 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost:1.121.2de2784434527
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

275
ketoory0.64.01 of 1See more

keto ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
oryd/keto:v26.2.0bfdb8b9e283a
openssl@3.3.6-r0
3.3.7-r1

Open the chart page →

978

Container images carrying it

3,356 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/ingress-nginx/controller:v1.13.137e489b22ac7
openssl@3.5.1-r0
3.5.8-r0
1
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
openssl@3.3.2-r4
3.3.7-r1
1
registry.k8s.io/kwok/kwok:v0.8.06d25aa8fbdfe
openssl@3.5.7-r0
3.5.8-r0
1
registry.k8s.io/provider-os/manila-csi-plugin:v1.36.0190976e2e2fe
openssl@3.5.4-r0
3.5.8-r0
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
openssl@3.0.20-1~deb12u2
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
openssl@3.0.15-1~deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.