StackRadar

CVE-2026-85091

High

Advisory

Published 3 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.3
base score, highest
EPSS
0.004
38th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,585
of 17,803 indexed, latest versions
Container images
2,574
deployed by those charts
Fix available
2 of 5
affected packages

CVE-2026-85091 affecting package zlib 1.3.2-1

Carried by container images the latest versions of 2,585 of 17,803 indexed charts deploy, on 2,574 images.

Affected packageAffected versionsFixed inImages
zlibdeb1:1.2.8.dfsg-1ubuntu1, 1:1.2.8.dfsg-1ubuntu1.1, 1:1.2.8.dfsg-2ubuntu4, 1:1.2.8.dfsg-2ubuntu4.1+22 more1:1.3.dfsg+really1.3.1-1+e22,487
zlibapk1.3-r2, 1.3.1-r4, 1.3.1-r5, 1.3.1-r6+6 more1.3.2.1_rc20260601-r086
rsyncdeb3.1.1-3ubuntu1.1, 3.1.1-3ubuntu1.2, 3.1.1-3ubuntu1.3, 3.1.2-2.1ubuntu1+8 moreno fix listed29
klibcdeb2.0.3-0ubuntu1, 2.0.3-0ubuntu1.14.04.3no fix listed7
zlibrpm1.3.1-1.azl3no fix listed1
OSV records
CGA-64hx-6x96-r8f7CGA-6ph6-75jp-484pDEBIAN-CVE-2026-85091UBUNTU-CVE-2026-85091AZL-99090ECHO-2e36-531c-37dd
Also known as
CGA-7955-fhww-9pv3, CGA-m46g-37hm-gpgh
Trending
Rank 30 in indexed charts, since 5 Sept 2026. See the ranking →

Charts affected

2,585 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,574 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
elastictranscoder/media-storage:f6d861a026208b8c2359
zlib@1:1.2.11.dfsg-0ubuntu2
no fix listed
1
elastictranscoder/transcoder:627e21dcb4a0327029e6
zlib@1:1.2.11.dfsg-0ubuntu2
no fix listed
1
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
zlib@1:1.2.11.dfsg-0ubuntu2
no fix listed
1
elastiflow/flow-collector:7.26.0fee67842e16b
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
electriccoinco/lightwalletd:v0.5.42ae3a551e111
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
empathyco/elasticsearch:7.17.2-memlock03e724e41eeb
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
1
emqx/ecp-ui:2.5.1e33e9816f147
zlib@1:1.2.13.dfsg-1
no fix listed
1
emqx/emqx:5.8.935b46f7aa7a0
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
emqx/emqx-enterprise:6.3.03b6d9c0c4199
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
enclavenetworks/enclave:latest0a99759300d1
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
1
engrmth/bnkr:2.1.06d8464e6f0e8
rsync@3.1.3-8
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
no fix listed
1
enix/san-iscsi-csi:v4.0.2f963da81ecf7
zlib@1:1.2.11.dfsg-0ubuntu2
no fix listed
1
envoyproxy/envoy:v1.30.92956bd9de830
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
envoyproxy/envoy:v1.38.4447f857a0146
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
envoyproxy/envoy:v1.33.056da5afd7df3
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
envoyproxy/envoy:v1.31-latestcaa5b411be16
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
envoyproxy/envoy:v1.34-latestcfc0678bc03c
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
envoyproxy/envoy:v1.30.1e596fda6a0ce
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
envoyproxy/envoy:v1.18.2e8b37c1d7578
zlib@1:1.2.11.dfsg-0ubuntu2
no fix listed
1
eqalpha/keydb:x86_64_v6.3.2fd9351ce27a7
zlib@1:1.2.11.dfsg-0ubuntu2.2
no fix listed
1
erenozcan17/flask_analytics:v3.1c9b6f0dfbffc
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
erigontech/erigon:latest2252efdf9abe
zlib@1:1.2.13.dfsg-1
no fix listed
1
erigontech/erigon:v2.61.288706754b627
zlib@1:1.2.13.dfsg-1
no fix listed
1
erlangsolutions/mongooseim:6.6.0cc5bf032931f
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
erudikaltd/para:latest_stable235e0bc53da2
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed
1
escaping/core-keeper-dedicated:latest87fa79255962
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
esphome/esphome:2026.7.44866347cb5b4
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
esphome/esphome:2026.9.09959730a04c7
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
esphome/esphome:2024.3.09ab8cc88b28c
zlib@1:1.2.13.dfsg-1
no fix listed
1
esphome/esphome:2024.12.2b2c6322700ac
zlib@1:1.2.13.dfsg-1
no fix listed
1
esphome/esphome:2025.3.0def8b6e4f517
zlib@1:1.2.13.dfsg-1
no fix listed
1
espocrm/espocrm:9.3.101b5a24504ed9
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ethanbergstrom/duoauthproxy:5.5.0345c2a46c103
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
1
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
rsync@3.1.1-3ubuntu1.1
zlib@1:1.2.8.dfsg-2ubuntu4.1
no fix listed
no fix listed
1
ethersphere/bee:2.2.0a884fd84b72f
zlib@1:1.2.13.dfsg-1
no fix listed
1
ethersphere/beekeeper:lateste4cda693ed63
zlib@1:1.2.13.dfsg-1
no fix listed
1
ethpandaops/assertoor:latest1efa2fba6711
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ethpandaops/buildoor:maina51b9a1a770c
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ethpandaops/dora:master2381ea793a12
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ethpandaops/eleel:mainb8f1b707aee0
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
ethpandaops/forky:debian-latestc937f4ba737c
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ethpandaops/observoor:masterc7e5055defcb
zlib@1:1.2.13.dfsg-1
no fix listed
1
ethpandaops/rpc-snooper:latestc0b30fcf64bc
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ethpandaops/spamoor:latest5f731b20ec50
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
factoriotools/factorio:stablec6092b912bd1
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
factoriotools/factorio:lateste9227748c507
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
factoriotools/factorio:2.0.67-rootlessf7909f7361d6
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
falcosecurity/event-generator:latest932956d86c99
zlib@1:1.2.13.dfsg-1
no fix listed
1
falcosecurity/falco:0.44.1d0cfe422d6ac
zlib@1.3.2-r3
1.3.2.1_rc20260601-r0
1
falcosecurity/falco-driver-loader:0.44.17df783d5269a
zlib@1:1.2.13.dfsg-1
no fix listed
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.