CVE-2026-8674
MediumAdvisory
Published 17 Sept 2026In the index since 18 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.5
- base score, highest
- EPSS
- 0.003
- 24th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 2,656
- of 17,821 indexed, latest versions
- Container images
- 2,696
- deployed by those charts
- Fix available
- None
- affected packages
CVE-2026-8674 affecting package glibc 2.38-21
Carried by container images the latest versions of 2,656 of 17,821 indexed charts deploy, on 2,696 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| glibcdeb | 2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+66 more | no fix listed | 2,676 |
| eglibcdeb | 2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 more | no fix listed | 7 |
| glibcrpm | 2.38-16.azl3, 2.38-18.azl3, 2.38-20.azl3 | no fix listed | 13 |
- OSV records
- DEBIAN-CVE-2026-8674UBUNTU-CVE-2026-8674AZL-101843ECHO-00de-f7d3-2e21
- Trending
- Rank 1 in indexed charts, since 18 Sept 2026. See the ranking →
Charts affected
2,656 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| spamoorethereum-helm-chartsVerified publisher | 1.0.1 | 1 of 1See more | 1,170 |
| splitoorethereum-helm-chartsVerified publisher | 0.0.1 | 1 of 1See more | 1,263 |
| tekuethereum-helm-chartsVerified publisher | 1.2.1 | 1 of 2See more | 1,065 |
| web3signerethereum-helm-chartsVerified publisher | 1.0.6 | 1 of 4See more | 2,093 |
| xatuethereum-helm-chartsVerified publisher | 0.0.1 | 1 of 1See more | 628 |
| xatu-cannonethereum-helm-chartsVerified publisher | 0.2.2 | 1 of 1See more | 628 |
| xatu-cl-mimicryethereum-helm-chartsVerified publisher | 0.0.2 | 1 of 1See more | 628 |
| xatu-consumoorethereum-helm-chartsVerified publisher | 0.0.1 | 1 of 1See more | 628 |
| xatu-discoveryethereum-helm-chartsVerified publisher | 0.0.6 | 1 of 1See more | 628 |
| xatu-mimicryethereum-helm-chartsVerified publisher | 0.0.7 | 1 of 1See more | 628 |
| xatu-relay-monitorethereum-helm-chartsVerified publisher | 0.0.1 | 1 of 1See more | 628 |
| xatu-sageethereum-helm-chartsVerified publisher | 0.0.1 | 1 of 1See more | 628 |
| xatu-sentryethereum-helm-chartsVerified publisher | 0.0.8 | 1 of 1See more | 628 |
| xatu-sentry-logsethereum-helm-chartsVerified publisher | 0.0.2 | 1 of 1See more | 921 |
| xatu-serverethereum-helm-chartsVerified publisher | 0.0.14 | 1 of 1See more | 628 |
| beeethersphereVerified publisher | 0.17.4 | 1 of 1See more | 3,518 |
| bee-overlay-exporterethersphereVerified publisher | 0.1.0 | 1 of 1See more | 906 |
| beeport-uiethersphereVerified publisher | 0.76.2 | 1 of 3See more | 7,714 |
| multichain-uiethersphereVerified publisher | 0.73.1 | 1 of 3See more | 7,714 |
| nethermindethersphereVerified publisher | 0.2.1 | 1 of 1See more | 89,028 |
| static-siteethersphereVerified publisher | 0.73.1 | 2 of 2See more | 7,316 |
| network-toolseugen | 0.2.4 | 1 of 1See more | 1,018 |
| snyk-farcaster-agenteugen | 1.0.1 | 1 of 1See more | 1,128 |
| supportpalevilgn0me | 0.1.6 | 1 of 1See more | 21,013 |
| evobotevobotVerified publisher | 0.1.1 | 1 of 1See more | 3,045 |
| spring-boot-adminevryfs-ossVerified publisher | 0.1.10 | 1 of 1See more | 6,065 |
| express-ts-app-helm-chartsexpress-ts-app-helm-chartsVerified publisher | 1.0.0 | 1 of 4See more | 5,843 |
| extended-ceph-exporterextended-ceph-exporterVerified publisher | 1.10.0 | 1 of 2See more | 3,045 |
| faasnetfaasnet | 0.0.4 | 1 of 5See more | 7,745 |
| capsizefairwinds-incubator | 0.2.0 | 1 of 1See more | 861 |
| datadog-apmfairwinds-incubator | 2.0.1 | 1 of 1See more | 2,898 |
| oom-event-generatorfairwinds-incubator | 0.2.2 | 1 of 1See more | 4,667 |
| yelbfairwinds-incubator | 0.1.1 | 1 of 5See more | 5,165 |
| event-generatorfalcosecurity | 0.4.0 | 1 of 1See more | 3,847 |
| farm-observabilityfarm-observabilityOfficialVerified publisher | 0.27.2 | 2 of 18See more | 13,610 |
| jenkinsfatihtepe-jenkins | 1.0.0 | 1 of 1See more | 2,549 |
| quickstartfeatureformVerified publisher | 0.1.1 | 2 of 3See more | 3,658 |
| activityrelayfedihost | 0.1.4 | 1 of 2See more | 13,540 |
| rospoferama | 0.4.3 | 1 of 1See more | 6,244 |
| vipienferama | 0.2.8 | 1 of 1See more | 7,545 |
| azure-pipelines-agentfermosit | 0.0.1 | 1 of 1See more | 14,728 |
| ferriscompanyferriscompany | 0.1.0 | 1 of 1See more | 10,962 |
| fibfibonacci-cluster-appsVerified publisher | 1.0.0 | 3 of 5See more | 17,154 |
| infrafibonacci-cluster-infraVerified publisher | 1.0.0 | 3 of 4See more | 12,677 |
| fineractfineract-openshift | 0.1.1 | 2 of 4See more | 7,978 |
| firefly-iiifirefly-iii | 1.10.1 | 1 of 1See more | 5,266 |
| firefly-iii-stackfirefly-iii | 0.10.2 | 2 of 4See more | 10,714 |
| importerfirefly-iii | 1.6.0 | 1 of 1See more | 5,056 |
| flask-contactsfirst-idror-chart | 1.0.1 | 2 of 3See more | 5,908 |
| business-api-ecosystemfiware | 1.1.0 | 2 of 4See more | 113,143 |
Container images carrying it
2,696 by charts deploying them
A fixed version is listed for 0 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| fosrl/ | 83a55f933b4d | glibc | no fix listed | 1 |
| frankescobar/ | 0815040339a9 | glibc | no fix listed | 1 |
| frankescobar/ | 4154286c0209 | glibc | no fix listed | 1 |
| frankescobar/ | 8a4d7e9308de | glibc | no fix listed | 1 |
| frankescobar/ | cafa03b94dac | glibc | no fix listed | 1 |
| frankescobar/ | dc171ec796d5 | glibc | no fix listed | 1 |
| free5gmano/ | 36f806935519 | glibc | no fix listed | 1 |
| freedom98/ | d7ce1533f297 | glibc | no fix listed | 1 |
| freeradius/ | af6fd34a5b78 | glibc | no fix listed | 1 |
| galaxy/ | e5c265fe9fcd | glibc | no fix listed | 1 |
| galaxy/ | 0267bad550e6 | eglibc | no fix listed | 1 |
| galaxy/ | 8e577a626dfd | eglibc | no fix listed | 1 |
| galaxy/ | e50a890e24c9 | glibc | no fix listed | 1 |
| galexrt/ | 5373078a3a08 | glibc | no fix listed | 1 |
| gchq/ | c460bb587d6d | glibc | no fix listed | 1 |
| geonetwork/ | 20c9bb761f67 | glibc | no fix listed | 1 |
| geonode/ | 81b1d431b7e9 | glibc | no fix listed | 1 |
| geopython/ | 84662ea6b78b | glibc | no fix listed | 1 |
| geoscienceaustralia/ | f4039b45572a | glibc | no fix listed | 1 |
| geoservercloud/ | ca58b74529cd | glibc | no fix listed | 1 |
| geoservercloud/ | de0b20bd2a43 | glibc | no fix listed | 1 |
| geoservercloud/ | b04ed89b5d2b | glibc | no fix listed | 1 |
| geoservercloud/ | 318254b52f96 | glibc | no fix listed | 1 |
| geoservercloud/ | 5dc0c93a1710 | glibc | no fix listed | 1 |
| geoservercloud/ | 47ae1bdb4bcc | glibc | no fix listed | 1 |
| geoservercloud/ | 4f077124f591 | glibc | no fix listed | 1 |
| geoservercloud/ | 28c3e5a8c5a3 | glibc | no fix listed | 1 |
| geoservercloud/ | 4f91e3048ac8 | glibc | no fix listed | 1 |
| geoservercloud/ | 299f0d6232d1 | glibc | no fix listed | 1 |
| geoservercloud/ | 8c70ee06d5ab | glibc | no fix listed | 1 |
| geoservercloud/ | 42775ba6a4da | glibc | no fix listed | 1 |
| geoservercloud/ | 5164f687ce4d | glibc | no fix listed | 1 |
| gethue/ | 11b649636e68 | glibc | no fix listed | 1 |
| gethue/ | 5702b2c37ff9 | glibc | no fix listed | 1 |
| gethue/ | 7d5c1b9f8a79 | glibc | no fix listed | 1 |
| getsentry/ | ba7bf9163219 | glibc | no fix listed | 1 |
| ghostfolio/ | e3c6ab53e49b | glibc | no fix listed | 1 |
| ghusta/ | 879d0919fdcc | glibc | no fix listed | 1 |
| gitlab/ | 860d4a3fec7a | glibc | no fix listed | 1 |
| glasskube/ | be5133100d63 | glibc | no fix listed | 1 |
| glpi/ | 7b50172cdb7d | glibc | no fix listed | 1 |
| gobitfly/ | 1d08a7986348 | glibc | no fix listed | 1 |
| golenski/ | c863dcb0c513 | glibc | no fix listed | 1 |
| golenski/ | 3a2b36df247b | glibc | no fix listed | 1 |
| golenski/ | 954caf4aaf6a | glibc | no fix listed | 1 |
| gopaddle/ | 435359250b63 | glibc | no fix listed | 1 |
| gopinatht/ | 632cb2e9c399 | glibc | no fix listed | 1 |
| gorules/ | 3cd59e25efad | glibc | no fix listed | 1 |
| gotenberg/ | 206a6c708fc6 | glibc | no fix listed | 1 |
| gotenberg/ | 67097317623a | glibc | no fix listed | 1 |