CVE-2026-75803

Critical

Advisory

Published 20 Aug 2026In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.002; 13th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,973; of 17,821 indexed, latest versions
Container images: 3,338; deployed by those charts
Fix available: 3 of 4; affected packages

CVE-2026-75803 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 2,973 of 17,821 indexed charts deploy, on 3,338 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+60 more	3.0.2-0ubuntu1.29, 3.0.13-0ubuntu3.15, 3.5.5-1ubuntu3.5, 3.5.7-1~deb13u2	1,882
opensslapk	3.3.1-r3, 3.3.2-r4, 3.3.2-r5, 3.3.3-r0+12 more	3.3.7-r1, 3.5.8-r0	1,425
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 more	no fix listed	17
opensslrpm	3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl3	3.3.7-6	14

OSV records: ALPINE-CVE-2026-75803 DEBIAN-CVE-2026-75803 UBUNTU-CVE-2026-75803 AZL-97935 ECHO-f836-71cf-434b
Also known as: USN-8678-1, USN-8678-3

Charts affected

2,973 by stars

Chart	Latest	Affected images	Radar Score

Container images carrying it

3,338 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/postgres :18 :18.6 :18.6-trixie :latest	4ef4dbc939d6	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	48
library/alpine :3 :3.24.1 :latest	28bd5fe8b56d	openssl@3.5.7-r0	3.5.8-r0	31
library/redis :8.10.1 :latest	298e5b3bc566	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	29
quay.io/kiwigrid/k8s-sidecar :2.5.0	a6b3f707f883	openssl@3.5.4-r0	3.5.8-r0	14
library/postgres :16.15-alpine :16-alpine	cf78e76683b9	openssl@3.5.7-r0	3.5.8-r0	13
library/redis :8.10.1-alpine :8-alpine :alpine	becdda6c7f4b	openssl@3.5.7-r0	3.5.8-r0	13
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	openssl@3.0.17-1~deb12u2	no fix listed	11
ethpandaops/xatu :latest	74d4cf2c436c	openssl@3.0.20-1~deb12u2	no fix listed	10
library/rabbitmq :3.9-management	8a279e9396a8	openssl@3.0.2-0ubuntu1.14	3.0.2-0ubuntu1.29	10
library/kong :3.6	a42d2b4503e7	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.29	8
library/mongo :8 :8.3.8 :latest	5211c51171f5	openssl@3.0.13-0ubuntu3.12	3.0.13-0ubuntu3.15	8
library/rabbitmq :3.13-management :3-management	e582c0bc7766	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.15	8
library/mariadb :12.3.3 :latest :lts	dd9b303aed4f	openssl@3.0.13-0ubuntu3.12	3.0.13-0ubuntu3.15	7
library/postgres :18.6-alpine :18-alpine :alpine	d3e1620b530c	openssl@3.5.7-r0	3.5.8-r0	7
library/postgres :16	f1c3376c26f2	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	7
nginxinc/nginx-unprivileged :1.29-alpine	0c79d56aee56	openssl@3.5.6-r0	3.5.8-r0	7
bitnamilegacy/postgresql :17.5.0 :latest	42a8200d3597	openssl@3.0.16-1~deb12u1	no fix listed	6
bitnamilegacy/rabbitmq :4.1.3 :4.1.3-debian-12-r1	9e635efba431	openssl@3.0.17-1~deb12u1	no fix listed	6
bitnamilegacy/redis :8.2.1-debian-12-r0	25bf63f3caf7	openssl@3.0.17-1~deb12u2	no fix listed	6
curlimages/curl :8.17.0	935d9100e9ba	openssl@3.5.4-r0	3.5.8-r0	6
grafana/grafana :latest	ac461fb352ab	openssl@3.5.7-r0	3.5.8-r0	6
grafana/grafana :latest	f772d434e8fa	openssl@3.5.7-r0	3.5.8-r0	6
jellyfin/jellyfin :10.11 :10.11.11 :latest	aefb67e6a7ff	openssl@3.5.6-1~deb13u1	3.5.7-1~deb13u2	6
library/memcached :1.6.39-alpine	c8503d4491ed	openssl@3.5.4-r0	3.5.8-r0	6
library/postgres :18.4	a02db8cac496	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	6
ghcr.io/appscode/b3 :v2026.9.11	76d28575b71c	openssl@3.0.20-1~deb12u2	no fix listed	6
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	openssl@3.0.11-1~deb12u2	no fix listed	6
quay.io/devtron/postgres :14.9	1b594392f7cb	openssl@3.0.11-1~deb12u2	no fix listed	6
registry.k8s.io/ingress-nginx/controller :v1.15.1	594ceea76b01	openssl@3.5.5-r0	3.5.8-r0	6
adguard/adguardhome :v0.107.79	aba9e3bf0613	openssl@3.5.7-r0	3.5.8-r0	5
alpine/kubectl :1.34.1	8413f8890d19	openssl@3.5.4-r0	3.5.8-r0	5
bitnamilegacy/kubectl :1.29.2	c74b703deed2	openssl@3.0.11-1~deb12u2	no fix listed	5
flaresolverr/flaresolverr :latest :v3.5.0	139dfee1c6f8	openssl@3.0.20-1~deb12u1	no fix listed	5
koenkk/zigbee2mqtt :2.14.1	fef0de769dcd	openssl@3.5.7-r0	3.5.8-r0	5
library/mariadb :10.11	7f22313fc130	openssl@3.0.2-0ubuntu1.29	no fix listed	5
library/phpmyadmin :5.2.3-apache :latest	3a8a8d6b5289	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	5
library/postgres :17-alpine	18cfe3ef5e68	openssl@3.5.7-r0	3.5.8-r0	5
library/postgres :12	2f2a8c2a7d10	openssl@3.0.15-1~deb12u1	no fix listed	5
library/postgres :15-alpine	fe0737ba566a	openssl@3.5.7-r0	3.5.8-r0	5
library/redis :7.4.2-alpine :7.4.2-alpine3.21	02419de7eddf	openssl@3.3.3-r0	3.3.7-r1	5
library/redis :7.4-alpine :7-alpine	ff02b58f971e	openssl@3.3.7-r0	3.3.7-r1	5
library/ubuntu :latest	2260313b31c8	openssl@3.5.5-1ubuntu3.3	3.5.5-1ubuntu3.5	5
natsio/nats-server-config-reloader :0.23.0	64cb6c858e79	openssl@3.5.5-r0	3.5.8-r0	5
vaultwarden/server :1.37.2 :latest	094b5689ed81	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	5
quay.io/kiwigrid/k8s-sidecar :2.8.1	abb55b2165c6	openssl@3.5.6-r0	3.5.8-r0	5
artifacthub/postgres :latest	4fd34fa635cc	openssl@3.5.1-1	3.5.7-1~deb13u2	4
bitnamilegacy/mariadb :12.0.2-debian-12-r0	888cdaae3cb9	openssl@3.0.17-1~deb12u2	no fix listed	4
bitnamilegacy/mysql :9.4.0-debian-12-r1	ec13e229247a	openssl@3.0.17-1~deb12u1	no fix listed	4
bitnamilegacy/postgresql :16	233f361c5819	openssl@3.0.15-1~deb12u1	no fix listed	4
bitnamilegacy/rabbitmq :4.1.2 :4.1.2-debian-12-r1	fac502149c40	openssl@3.0.16-1~deb12u1	no fix listed	4