StackRadar

CVE-2026-77117

Medium

Advisory

Published 27 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.004
33rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,796
of 17,911 indexed, latest versions
Container images
2,825
deployed by those charts
Fix available
1 of 4
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 2,796 of 17,911 indexed charts deploy, on 2,825 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+63 more2.35-0ubuntu3.15, 2.39-0ubuntu8.9, 2.41-12+deb13u3+e6, 2.43-2ubuntu2.42,674
glibc-2.44apk2.44-r1, 2.44-r4, 2.44-r5, 2.44-r6no fix listed143
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
glibc-2.43apk2.43-r14no fix listed1
OSV records
CGA-3wqx-vm4q-p554DEBIAN-CVE-2026-77117UBUNTU-CVE-2026-77117CGA-3mpj-r23j-gqxpCGA-6rxh-7rcg-6vm6CGA-86q6-jgw4-4qvqCGA-gm49-5xmv-9mwgCGA-gvr8-r35v-jwr6CGA-p9hr-458p-2fj5ECHO-52f8-53b9-ae20
Also known as
CGA-26xq-9jxj-rw6f, CGA-58cc-vw33-fmgw, CGA-965p-4jfr-2ph7, CGA-h2mc-94cg-jh7f, CGA-h7q9-f494-wj26, CGA-h9gc-g4cr-r6c4, CGA-hcvr-63qq-w73g, CGA-hm69-mxvx-ff6j, CGA-jjr2-x4j3-gqwr, CGA-jvq4-83m5-3qqg, CGA-m5f2-g9g8-q69p, CGA-qwjw-qj9j-qrf5, CGA-xxjm-mj25-24q2, USN-8737-1, USN-8737-2

Charts affected

2,796 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,825 by charts deploying them

A fixed version is listed for 1 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
redis/redis-stack-server:latest798ab84d9f26
glibc@2.35-0ubuntu3.11
2.35-0ubuntu3.15
1
redis/redis-stack-server:7.4.0-v0887cf87cc744
glibc@2.35-0ubuntu3.8
2.35-0ubuntu3.15
1
redpandadata/redpanda:latest9e83cfa99278
glibc@2.41-12+deb13u4
no fix listed
1
reportportal/service-auto-analyzer:5.15.5c449b93629a5
glibc@2.41-12+deb13u3
no fix listed
1
resouer/redis-slave:v2e2f198b49ba7
eglibc@2.19-0ubuntu6.6
no fix listed
1
resurfaceio/resurface:3.7.84d5cda2f64109
glibc@2.35-0ubuntu3.9
2.35-0ubuntu3.15
1
rezachalak/bzen-mongo:1.0.034f694325191
glibc@2.31-0ubuntu9.9
no fix listed
1
rhasspy/wyoming-openwakeword:2.1.052cb1168731a
glibc@2.36-9+deb12u13
no fix listed
1
rhasspy/wyoming-piper:2.3.169b7f797ae3a
glibc@2.36-9+deb12u14
no fix listed
1
rhasspy/wyoming-piper:2.5.27d39aafac409
glibc@2.41-12+deb13u3
no fix listed
1
rhasspy/wyoming-speech-to-phrase:1.4.3e532f0dbc6b2
glibc@2.36-9+deb12u13
no fix listed
1
rhasspy/wyoming-whisper:3.5.0308b7959a925
glibc@2.36-9+deb12u14
no fix listed
1
rm3l/service-names-port-numbers:0.12.162d1cc4223e5
glibc@2.31-0ubuntu9.2
no fix listed
1
rnwood/smtp4dev:3.6.1912304153668
glibc@2.36-9+deb12u7
no fix listed
1
robotshop/rs-mongodb:latest119b545823cd
glibc@2.31-0ubuntu9.2
no fix listed
1
robustadev/krr:v1.30.0b8d782e568c7
glibc@2.41-12+deb13u3
no fix listed
1
rocketadmin/rocketadmin:1.17.710955ef540b9
glibc@2.36-9+deb12u13
no fix listed
1
rocketchat/freeswitch:stablecfba5c20a5cc
glibc@2.36-9+deb12u10
no fix listed
1
rotationalio/beacon:0.2.0f8d8b694515a
glibc@2.41-12+deb13u3+dhi1
no fix listed
1
rotationalio/endeavor:1.4.21a73cb9620ef
glibc@2.36-9+deb12u14
no fix listed
1
rotationalio/genoa:1.2.03ab583519215
glibc@2.36-9+deb12u14
no fix listed
1
rotationalio/geoping:1.3.034bcb6fc3cb7
glibc@2.41-12+deb13u1
no fix listed
1
rotationalio/honu:0.5.069fd30c2e31c
glibc@2.36-9+deb12u13
no fix listed
1
rotationalio/rotational-api:1.3.0f1a2d05d8fff
glibc@2.41-12+deb13u1
no fix listed
1
rotationalio/vanity:1.2.0d77350f69b45
glibc@2.41-12+deb13u1
no fix listed
1
roundcube/roundcubemail:1.6.16-apache-nonroot17d9d9580962
glibc@2.41-12+deb13u3
no fix listed
1
rraahul/test:latestbfe2c1183bc0
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.15
1
rrobetti/ojp:0.1.0-beta1141bd88232b
glibc@2.39-0ubuntu8.3
2.39-0ubuntu8.9
1
rspamd/rspamd:4.1.4e870599c970d
glibc@2.41-12+deb13u3
no fix listed
1
rstmdb/rstmdb:lateste5187f2aaace
glibc@2.36-9+deb12u14
no fix listed
1
rtuszik/photon-docker:2.4.021549c60f9e6
glibc@2.39-0ubuntu8.6
2.39-0ubuntu8.9
1
rundeck/rundeck:3.2.74d64fe56f767
glibc@2.23-0ubuntu11
no fix listed
1
rundeck/rundeck:3.0.16b13e8059ad72
glibc@2.23-0ubuntu10
no fix listed
1
rustfs/operator:0.07b96f986e5991
glibc@2.36-9+deb12u14
no fix listed
1
ryshe/terraria:latestb1c89f7f359a
glibc@2.36-9+deb12u13
no fix listed
1
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
glibc@2.35-0ubuntu3.8
2.35-0ubuntu3.15
1
ryuunosukeds3/orbital:latest0879f7261b10
glibc@2.36-9+deb12u10
no fix listed
1
salaboy/agenda-service-0967b907d9920c99918e2b91b91937b3ce9ce8293e4e
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.15
1
salaboy/c4p-service-a3dc0474cbfa348afcdf47a8eee70ba9bb64bf14467d
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.15
1
salaboy/notifications-service-0e27884e01429ab7e350cb5dff61b525799c35f9f306
glibc@2.35-0ubuntu3.1
2.35-0ubuntu3.15
1
santisbon/evwatcher:latestc4e994ca4540
glibc@2.36-9+deb12u1
no fix listed
1
santisbon/evworker:lateste807283f8d69
glibc@2.36-9+deb12u1
no fix listed
1
santisbon/speedtest:latest8ee3a1697227
glibc@2.36-9+deb12u1
no fix listed
1
sashafefler/spacecapybara_app:latestf96d7804c0ca
glibc@2.36-9+deb12u8
no fix listed
1
sashastudent/uptime-platform:latest37a82b4e598e
glibc@2.41-12+deb13u4
no fix listed
1
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
glibc@2.36-9+deb12u3
no fix listed
1
schemahero/schemahero-manager:0.22.11609e1a05cd3
glibc@2.39-0ubuntu8.5
2.39-0ubuntu8.9
1
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
glibc@2.35-0ubuntu3.8
2.35-0ubuntu3.15
1
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
glibc@2.35-0ubuntu3.8
2.35-0ubuntu3.15
1
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
glibc@2.35-0ubuntu3.8
2.35-0ubuntu3.15
1

syft 1.42.1 · advisories as of 26 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.