CVE-2026-77117
MediumAdvisory
Published 27 Aug 2026In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.9
- base score, highest
- EPSS
- 0.004
- 33rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 2,808
- of 17,879 indexed, latest versions
- Container images
- 2,866
- deployed by those charts
- Fix available
- 1 of 4
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 2,808 of 17,879 indexed charts deploy, on 2,866 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| glibcdeb | 2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+63 more | 2.35-0ubuntu3.15, 2.39-0ubuntu8.9, 2.41-12+deb13u3+e6, 2.43-2ubuntu2.4 | 2,705 |
| eglibcdeb | 2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 more | no fix listed | 7 |
| glibc-2.44apk | 2.44-r1, 2.44-r4, 2.44-r5, 2.44-r6 | no fix listed | 153 |
| glibc-2.43apk | 2.43-r14 | no fix listed | 1 |
- OSV records
- DEBIAN-CVE-2026-77117UBUNTU-CVE-2026-77117CGA-26xq-9jxj-rw6fCGA-3mpj-r23j-gqxpCGA-6rxh-7rcg-6vm6CGA-86q6-jgw4-4qvqCGA-gm49-5xmv-9mwgCGA-gvr8-r35v-jwr6CGA-p9hr-458p-2fj5ECHO-52f8-53b9-ae20
- Also known as
- CGA-58cc-vw33-fmgw, CGA-965p-4jfr-2ph7, CGA-h2mc-94cg-jh7f, CGA-h7q9-f494-wj26, CGA-h9gc-g4cr-r6c4, CGA-hcvr-63qq-w73g, CGA-hm69-mxvx-ff6j, CGA-jjr2-x4j3-gqwr, CGA-jvq4-83m5-3qqg, CGA-m5f2-g9g8-q69p, CGA-qwjw-qj9j-qrf5, CGA-xxjm-mj25-24q2, USN-8737-1, USN-8737-2
Charts affected
2,808 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| zahori-schedulerzahoriVerified publisher | 1.0.1 | 1 of 1See more | 2,536 |
| jenkinszanise-jenkins-helm-chart | 0.1.0 | 1 of 1See more | 2,652 |
| changedetection-iozekker6Verified publisher | 1.102.0 | 1 of 1See more | 2,858 |
| endlessh-gozekker6Verified publisher | 0.4.0 | 1 of 1See more | 525 |
| NEW_APPzekker6Verified publisher | 0.0.0 | 1 of 1See more | 1,672 |
| sockpuppetbrowserzekker6Verified publisher | 0.1.0 | 1 of 1See more | 4,858 |
| clickhousezloi-space | 1.2.0 | 2 of 3See more | 9,550 |
| zoo-project-druzoo-projectOfficialVerified publisher | 0.10.4 | 1 of 6See more | 8,389 |
Container images carrying it
2,866 by charts deploying them
A fixed version is listed for 1 of the 4 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | 329c8a3d2403 | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | 692315481e2e | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | 6d8fffc88591 | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | 81f45bc56d61 | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | ae8ab43a2c9f | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | 289e9d1b5f14 | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | e9132003d55d | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | 74e36c296781 | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | 295609b206df | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | a7821216126c | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | 227b8d69593a | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | 222684978116 | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | 3957f7bf04a0 | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | 6f2b68757901 | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | 5c8829c326dc | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | 57328bd33b6f | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | f95fa79894f8 | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | 19e461bc40f0 | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | a989540d10b6 | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | d066975c8235 | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | 55b82e469be0 | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | 19638f358b40 | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | 26a2b81309db | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | efeb0bd0742b | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | 9f956c68b387 | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | adfea2763e3e | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | 104776395b01 | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | fe70e5ef7ba7 | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | e14d0e3c482d | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | 3b5db46625c9 | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | 73d332844562 | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | 65cee48a0390 | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | 1f2368a3cdf3 | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | be19f91d040b | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | c77e67112939 | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | 33211f47180a | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | 533638bd4c1f | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | d6b4a8297ea5 | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | 5b2b20911e3b | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | cf19b80714fa | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | afa7e9188154 | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | 3e1442b4c91c | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | a45d7655e138 | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | 87df3003f399 | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | 100ed663fabe | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | 85b22c79b8cf | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | 2a0c5532d127 | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | 343e85ab63fa | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | 35a18e31fafe | glibc-2.44 | no fix listed | 1 |
| ghcr.io/ | fac657be565e | glibc-2.44 | no fix listed | 1 |