StackRadar

CVE-2026-75803

Critical

Advisory

Published 20 Aug 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.002
13th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,973
of 17,821 indexed, latest versions
Container images
3,338
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-75803 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 2,973 of 17,821 indexed charts deploy, on 3,338 images.

Affected packageAffected versionsFixed inImages
openssldeb3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+60 more3.0.2-0ubuntu1.29, 3.0.13-0ubuntu3.15, 3.5.5-1ubuntu3.5, 3.5.7-1~deb13u21,882
opensslapk3.3.1-r3, 3.3.2-r4, 3.3.2-r5, 3.3.3-r0+12 more3.3.7-r1, 3.5.8-r01,425
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed17
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl33.3.7-614
OSV records
ALPINE-CVE-2026-75803DEBIAN-CVE-2026-75803UBUNTU-CVE-2026-75803AZL-97935ECHO-f836-71cf-434b
Also known as
USN-8678-1, USN-8678-3

Charts affected

2,973 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

3,338 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/linuxserver/plex:latest7f9a1d574958
openssl@3.5.5-1ubuntu3.4
3.5.5-1ubuntu3.5
2
ghcr.io/lissy93/web-check:latesta4e021c0f6a9
openssl@3.0.20-1~deb12u2
no fix listed
2
ghcr.io/mogenius/mo-backup:latest4f89afef9010
openssl@3.5.7-r0
3.5.8-r0
2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss:unprivileged-oss-202503313db8145349a3
openssl@3.0.14-1~deb12u2
no fix listed
2
ghcr.io/nucleuscloud/neosync/api:0.5.41e2abb798f29f
openssl@3.0.16-1~deb12u1
no fix listed
2
ghcr.io/nucleuscloud/neosync/app:0.5.41ca31ec35b829
openssl@3.5.0-r0
3.5.8-r0
2
ghcr.io/nucleuscloud/neosync/worker:0.5.4196f42450c5b1
openssl@3.0.16-1~deb12u1
no fix listed
2
ghcr.io/opencost/opencost:1.121.2de2784434527
openssl@3.5.7-r0
3.5.8-r0
2
ghcr.io/plausible/community-edition:v3.2.133e60bfb40f2
openssl@3.5.6-r0
3.5.8-r0
2
ghcr.io/postgresml/pgcat:main245f9d2f5f5b
openssl@3.0.11-1~deb12u2
no fix listed
2
ghcr.io/postgresml/pgcat:v1.2.0627761f6dcbc
openssl@3.0.13-1~deb12u1
no fix listed
2
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
openssl@3.0.15-1~deb12u1
no fix listed
2
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
openssl@3.0.2-0ubuntu1.2
3.0.2-0ubuntu1.29
2
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
openssl@3.0.15-1~deb12u1
no fix listed
2
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
openssl@3.0.18-1~deb12u2
no fix listed
2
ghcr.io/wg-easy/wg-easy:15:15.4.00e7bc9d34e86
openssl@3.5.7-r0
3.5.8-r0
2
ghcr.io/wg-easy/wg-easy:145f26407fd2ed
openssl@3.5.0-r0
3.5.8-r0
2
public.ecr.aws/aktosecurity/akto-api-security-dashboard:1.69.2:latestb53a854bd7c1
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
2
public.ecr.aws/cloudnatix/llmariner/model-manager-loader:1.27.026ac7263a823
openssl@3.5.1-1
3.5.7-1~deb13u2
2
public.ecr.aws/docker/library/redis:8.8.0-alpine9d317178ecea
openssl@3.5.7-r0
3.5.8-r0
2
public.ecr.aws/gravitational/tbot-distroless:18.11.1f64ff28fd9bd
openssl@3.0.20-1~deb12u2
no fix listed
2
public.ecr.aws/truefoundrycloud/timberio/vector:v0.52.088b8dc80ae74
openssl@3.5.6-r0
3.5.8-r0
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15
2
quay.io/cilium/tetragon:v1.7.1afc9458ba4bc
openssl@3.5.7-r0
3.5.8-r0
2
quay.io/curl/curl:8.16.0b17b13321678
openssl@3.5.2-r0
3.5.8-r0
2
quay.io/frrouting/frr:10.4.38745af1f9bbb
openssl@3.5.5-r0
3.5.8-r0
2
quay.io/kiwigrid/k8s-sidecar:2.1.2716b0b33ff2d
openssl@3.5.4-r0
3.5.8-r0
2
quay.io/metallb/frr-k8s:v0.0.251cb06fb2d553
openssl@3.5.6-r0
3.5.8-r0
2
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
openssl@3.5.4-r0
3.5.8-r0
2
registry.gitlab.com/shortlink-org/shortlink/ui:main9bdb1062d960
openssl@3.5.5-r0
3.5.8-r0
2
registry.k8s.io/ingress-nginx/controller:v1.11.8695d79381ee6
openssl@3.5.0-r0
3.5.8-r0
2
registry.k8s.io/ingress-nginx/controller:v1.12.1d2fbc4ec70d8
openssl@3.3.3-r0
3.3.7-r1
2
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
openssl@3.0.20-1~deb12u2
no fix listed
2
1dev/server:11.9.0cd5b12fe5471
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15
1
1password/connect-api:1.8.2e915c0c84397
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2
1
1password/connect-sync:1.8.26297ca6136c0
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2
1
2martens/timetable:latestbd1ba6ab84c9
openssl@3.5.1-r0
3.5.8-r0
1
2martens/wahlrecht:latestba2c3040dab0
openssl@3.5.1-r0
3.5.8-r0
1
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
openssl@3.0.9-1
no fix listed
1
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2
1
aaronshaf/dynamodb-admin:latestac41724cd997
openssl@3.5.6-r0
3.5.8-r0
1
abdullahkhawer/simple-elasticsearch-cleaner:2.1.028a6c3f7e0a9
openssl@3.3.2-r4
3.3.7-r1
1
abhinavsingh/proxy.py:latest51adc989fd03
openssl@3.3.3-r0
3.3.7-r1
1
abiondevelopment/cert-manager-webhook-abion:latestc741988fbd23
openssl@3.3.4-r0
3.3.7-r1
1
aboogie/login_test_backend:new9c41a4483ac8
openssl@3.0.13-1~deb12u1
no fix listed
1
adguard/adguardhome:v0.107.767157eb1dc3b2
openssl@3.5.6-r0
3.5.8-r0
1
adguard/adguardhome:v0.107.737fbf01d73ecb
openssl@3.5.5-r0
3.5.8-r0
1
adguard/adguardhome:v0.107.65d765078d2140
openssl@3.3.4-r0
3.3.7-r1
1
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.15
1
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
openssl@3.0.13-0ubuntu3.1
3.0.13-0ubuntu3.15
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.