CVE-2026-9076
HighAdvisory
Published 9 Jun 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.007
- 52nd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 2,220
- of 17,790 indexed, latest versions
- Container images
- 2,434
- deployed by those charts
- Fix available
- 4 of 5
- affected packages
CVE-2026-9076 affecting package openssl for versions less than 3.3.7-3
Carried by container images the latest versions of 2,220 of 17,790 indexed charts deploy, on 2,434 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| openssldeb | 1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+103 more | 1.0.1f-1ubuntu2.27+esm14, 1.0.2g-1ubuntu4.20+esm16, 1.1.1-1ubuntu2.1~18.04.23+esm9, 1.1.1f-1ubuntu2.24+esm4+6 more | 1,792 |
| opensslapk | 3.2.0-r0, 3.3.1-r4, 3.3.2-r0, 3.3.2-r2+13 more | 3.5.7-r0, 3.6.3-r0 | 637 |
| nodejsdeb | 4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 more | no fix listed | 16 |
| openssl1.0deb | 1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more | 1.0.2n-1ubuntu5.13+esm5 | 15 |
| opensslrpm | 3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3 | 3.3.7-3 | 5 |
- OSV records
- ALPINE-CVE-2026-9076CGA-6mcp-mm5g-jxrjCGA-847w-c3x7-8qp6DEBIAN-CVE-2026-9076UBUNTU-CVE-2026-9076AZL-89934
- Also known as
- CGA-6p96-39qh-rm77, CGA-f2mp-q84v-4jv2, USN-8414-1, USN-8414-2
Charts affected
2,220 by stars
Container images carrying it
2,434 by charts deploying them
A fixed version is listed for 4 of the 5 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| apache/ | bae523439ee3 | openssl | 3.0.13-0ubuntu3.11 | 1 |
| apache/ | 64e58748b6b9 | openssl | 3.0.20-1~deb12u2 | 1 |
| apache/ | ce90bdc3d2af | openssl | 3.0.20-1~deb12u2 | 1 |
| apache/ | e5560ad0b86e | openssl | 3.0.20-1~deb12u2 | 1 |
| apache/ | 5e47692cac00 | openssl | 3.0.13-0ubuntu3.11 | 1 |
| apache/ | 80136ae753ee | openssl | 3.0.2-0ubuntu1.25 | 1 |
| apache/ | 75d48a62748f | openssl | 3.0.13-0ubuntu3.11 | 1 |
| apache/ | a2bab1be574c | openssl | 3.0.13-0ubuntu3.11 | 1 |
| apache/ | afa47bf1692a | openssl | 1.1.1f-1ubuntu2.24+esm4 | 1 |
| apache/ | bff074a5d005 | openssl | 3.5.7-r0 | 1 |
| apache/ | 9a9d16e60894 | openssl | 3.5.7-r0 | 1 |
| apache/ | 63b8e3e40742 | openssl | 3.0.2-0ubuntu1.25 | 1 |
| apachepulsar/ | 16f9fdab3fa6 | openssl | 3.0.2-0ubuntu1.25 | 1 |
| apachepulsar/ | 3b262ab7a7d9 | openssl | 1.1.1f-1ubuntu2.24+esm4 | 1 |
| apachepulsar/ | 9c9947de139d | openssl | 3.0.2-0ubuntu1.25 | 1 |
| apachepulsar/ | d056c89b7131 | openssl | 1.1.1f-1ubuntu2.24+esm4 | 1 |
| apachepulsar/ | d538416d5afe | openssl | 1.1.1f-1ubuntu2.24+esm4 | 1 |
| apache/ | 76c176e8a0e4 | openssl | 3.0.2-0ubuntu1.25 | 1 |
| apache/ | 434d8398f996 | openssl | 3.0.13-0ubuntu3.11 | 1 |
| apache/ | c8fb51195444 | openssl | 3.0.2-0ubuntu1.25 | 1 |
| apache/ | 133d35d2c263 | openssl | 3.0.2-0ubuntu1.25 | 1 |
| apache/ | b4ec8c18d079 | openssl | 1.1.1f-1ubuntu2.24+esm4 | 1 |
| apache/ | 295f1dc87d98 | openssl | 3.0.2-0ubuntu1.25 | 1 |
| apache/ | 80530f0308a5 | openssl | 1.1.1f-1ubuntu2.24+esm4 | 1 |
| apache/ | ab9467fd712c | openssl | 3.0.20-1~deb12u2 | 1 |
| apache/ | 90b7fa1dc018 | openssl | 3.5.5-1ubuntu3.2 | 1 |
| apache/ | 92d055a84e9e | openssl | 3.0.2-0ubuntu1.25 | 1 |
| apecloud/ | 8ac9947a2c84 | openssl | 3.5.6-1~deb13u2 | 1 |
| appwrite/ | 1aaa70127114 | openssl | 3.5.7-r0 | 1 |
| aquasec/ | 7a8fa32dce21 | openssl | 3.5.7-r0 | 1 |
| aquasec/ | bcc376de8d77 | openssl | 3.5.7-r0 | 1 |
| archivebox/ | 1a5a37331091 | openssl | 3.0.20-1~deb12u2 | 1 |
| arilot/ | 27a4f7e0f9f1 | openssl | 1.0.2g-1ubuntu4.20+esm16 | 1 |
| aristidetm/ | 469dbc951224 | openssl | 3.0.20-1~deb12u2 | 1 |
| arthurjguerra18/ | f540af20b307 | openssl | 3.0.20-1~deb12u2 | 1 |
| artur9010/ | 6b4de3ce8b0e | openssl | 3.0.20-1~deb12u2 | 1 |
| arunvelsriram/ | 655ad18fd8d6 | openssl | 3.0.13-0ubuntu3.11 | 1 |
| assistiot/ | 6a107f224c34 | openssl | 1.1.1f-1ubuntu2.24+esm4 | 1 |
| assistiot/ | d157fbe150e3 | openssl | 1.1.1f-1ubuntu2.24+esm4 | 1 |
| assistiot/ | 0d3e6d35f168 | openssl | 3.0.20-1~deb12u2 | 1 |
| assistiot/ | e9bae124095f | openssl | 3.0.2-0ubuntu1.25 | 1 |
| assistiot/ | 30812ba93555 | openssl | 3.0.2-0ubuntu1.25 | 1 |
| assistiot/ | ea254b6d8a31 | openssl | 1.1.1f-1ubuntu2.24+esm4 | 1 |
| assistiot/ | 7d6a0d534c7f | openssl | 3.0.20-1~deb12u2 | 1 |
| assistiot/ | 38b003e55ff3 | openssl | 3.0.20-1~deb12u2 | 1 |
| assistiot/ | b1dbe4d62a03 | openssl | 3.0.20-1~deb12u2 | 1 |
| assistiot/ | e5ae539ce2cb | openssl | 1.1.1f-1ubuntu2.24+esm4 | 1 |
| athou/ | 5e388351df1a | openssl | 3.5.6-1~deb13u2 | 1 |
| atlassian/ | 3b9222ab32ef | openssl | 3.0.2-0ubuntu1.25 | 1 |
| atlassian/ | 37bc46cbec1a | openssl | 3.0.2-0ubuntu1.25 | 1 |