StackRadar

CVE-2026-75806

Medium

Advisory

Published 29 Sept 2026In the index since 30 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
30th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,945
of 17,985 indexed, latest versions
Container images
2,976
deployed by those charts
Fix available
2 of 4
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 2,945 of 17,985 indexed charts deploy, on 2,976 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+123 more3.0.2-0ubuntu1.30, 3.0.13-0ubuntu3.16, 3.5.5-1ubuntu3.6, 3.5.7-1~deb13u32,680
opensslapk3.3.1-r3, 3.3.2-r4, 3.3.2-r5, 3.3.3-r0+5 more3.3.7-r2296
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+14 moreno fix listed23
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 moreno fix listed22
OSV records
ALPINE-CVE-2026-75806DEBIAN-CVE-2026-75806UBUNTU-CVE-2026-75806ECHO-c4dc-a1f8-f0ae
Also known as
USN-8847-1
Trending
Rank 3 in indexed charts, since 30 Sept 2026. See the ranking →

Charts affected

2,945 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,976 by charts deploying them

A fixed version is listed for 2 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
wazuh/wazuh-manager:4.4.121994f40e0da
openssl@1.1.1f-1ubuntu2.17
no fix listed
1
webodm/webodm_webapp:3.3.0ed7b1aa0e40f
nodejs@20.20.2-1nodesource1
openssl@3.0.2-0ubuntu1.29
no fix listed
3.0.2-0ubuntu1.30
1
wger/server:2.71c5789b93bfe
openssl@3.0.13-0ubuntu3.15
3.0.13-0ubuntu3.16
1
wiktorn/overpass-api:latest9bb5f4a9b54c
openssl@3.0.20-1~deb12u2
no fix listed
1
wistefan/mvf:lateste0887302b2d8
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.30
1
wolveix/satisfactory-server:v1.9.1199be1064b18
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.30
1
wolveix/satisfactory-server:v1.9.9464d11e36e10
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.30
1
woojoong/wowza:latestec230db19652
openssl@1.1.0g-2ubuntu4.1
no fix listed
1
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
nodejs@20.15.0-1nodesource1
openssl@3.0.2-0ubuntu1.16
no fix listed
3.0.2-0ubuntu1.30
1
worthnl/notifynl-omc:2.2.16f58fc28252d
openssl@3.0.13-0ubuntu3.15
3.0.13-0ubuntu3.16
1
wso2/wso2am:2.6.0fbe0f4059b74
openssl@1.1.1f-1ubuntu2
no fix listed
1
wso2/wso2am-analytics-worker:2.6.005fa15b3d927
openssl@1.1.0g-2ubuntu4.3
no fix listed
1
wso2/wso2ei-analytics-dashboard:6.6.0526a1ccae902
openssl@1.1.1-1ubuntu2.1~18.04.5
no fix listed
1
wso2/wso2ei-analytics-worker:6.6.021e6b03449ac
openssl@1.1.1-1ubuntu2.1~18.04.5
no fix listed
1
wso2/wso2ei-integrator:6.6.0790cd8c3a5a2
openssl@1.1.1-1ubuntu2.1~18.04.5
no fix listed
1
xeladock/mysql_dns:latest4baf531453f1
openssl@3.0.2-0ubuntu1
3.0.2-0ubuntu1.30
1
xeladock/nginx2:latestc259a67b1dff
openssl@3.0.2-0ubuntu1
3.0.2-0ubuntu1.30
1
xeotek/kadeck:6.3.439a3b37a17c5
openssl@3.0.2-0ubuntu1.20
3.0.2-0ubuntu1.30
1
xeotek/kadeck:4.2.94c6b04d9ce55
openssl@1.1.1f-1ubuntu2.17
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
openssl@3.0.13-1~deb12u1
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
openssl@3.0.13-1~deb12u1
no fix listed
1
yandex/clickhouse-client:21.3863f94a0f607
openssl@1.1.1-1ubuntu2.1~18.04.14
no fix listed
1
yandex/clickhouse-server:latest1cbf75aabe1e
openssl@1.1.1f-1ubuntu2.10
no fix listed
1
yandex/clickhouse-server:21.3.204eccfffb01d7
openssl@1.1.1f-1ubuntu2.10
no fix listed
1
yandex/clickhouse-server:19.17ab1738a64b70
openssl@1.1.1-1ubuntu2.1~18.04.6
no fix listed
1
yandex/clickhouse-server:19.14ccf9c2b5e3f2
openssl@1.1.1-1ubuntu2.1~18.04.6
no fix listed
1
yandex/clickhouse-server:19.16d210dc69321e
openssl@1.1.1-1ubuntu2.1~18.04.5
no fix listed
1
yanickxia/recho:latest117516fc2e46
openssl@3.0.14-1~deb12u2
no fix listed
1
ybucci/traefik-external-dns-controller:2.3.0cc22a16fac81
openssl@3.5.7-1~deb13u2
3.5.7-1~deb13u3
1
ybucci/traefik-external-dns-operator:1.0.0f1fcc7c8d9fd
openssl@3.3.3-r0
3.3.7-r2
1
yetiplatform/bloomcheck:dev85683ddfccbb
openssl@3.3.3-r0
3.3.7-r2
1
yetiplatform/yeti:2.9.09bcbe2650a14
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u3
1
yetiplatform/yeti:latest9c3006cedcca
openssl@3.5.7-1~deb13u2
3.5.7-1~deb13u3
1
yetiplatform/yeti-frontend:latest709064278c7e
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u3
1
yetiplatform/yeti-frontend:2.9.0873ef15d267b
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u3
1
yidadaa/chatgpt-next-web:latesteaaa469ddeeb
openssl@3.3.3-r0
3.3.7-r2
1
youkadev/api-snap:0.1.14db0f9428e67
openssl@3.0.11-1~deb12u2
no fix listed
1
youssef11gaber10/flask-service:latest9c727fcfde76
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u3
1
yuzutech/kroki-bpmn:0.29.1444805c4b917
openssl@3.3.5-r0
3.3.7-r2
1
yuzutech/kroki-diagramsnet:0.29.1b810edbf9c62
openssl@3.3.5-r0
3.3.7-r2
1
yuzutech/kroki-excalidraw:0.29.157917319ea70
openssl@3.3.5-r0
3.3.7-r2
1
yuzutech/kroki-mermaid:0.29.1963b4acfde6e
openssl@3.3.5-r0
3.3.7-r2
1
zabbix/zabbix-agent:ubuntu-5.4.62127168cab03
openssl@1.1.1f-1ubuntu2.8
no fix listed
1
zabbix/zabbix-agent2:ubuntu-7.0.237322a94c5d7a
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.16
1
zabbix/zabbix-agent2:ubuntu-6.0.8e5b594057c9c
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.30
1
zabbix/zabbix-server-mysql:ubuntu-6.4-latest55d074b6b031
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.16
1
zabbix/zabbix-server-pgsql:ubuntu-5.4.66c946b1f45cd
openssl@1.1.1f-1ubuntu2.8
no fix listed
1
zabbix/zabbix-server-pgsql:ubuntu-7.0.237e8c8e059533
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.16
1
zabbix/zabbix-server-pgsql:ubuntu-6.0.8d59ffa07f615
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.30
1
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.16
1

syft 1.42.1 · advisories as of 2 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.