HI
Product
Hardened Images
50
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 20Medium 24Low 5
Watch
Add Hardened Images to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-59851 | 8.8 | Jul 21 | Libssh: libssh: authentication bypass via missing gssapi principal check Affected: All versions, or not specified |
| CVE-2026-0966 | 8.2 | Mar 26 | Libssh: libssh: denial of service via zero-length input in ssh_get_hexa() Affected: All versions, or not specified |
| CVE-2026-42055 | 8.1 | Jun 17 | NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability Affected: All versions, or not specified |
| CVE-2026-9256 | 8.1 | May 22 | NGINX ngx_http_rewrite_module vulnerability Affected: All versions, or not specified |
| CVE-2026-48864 | 7.8 | May 26 | Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data Affected: All versions, or not specified |
| CVE-2026-6846 | 7.8 | Apr 22 | Binutils: binutils: arbitrary code execution via malformed xcoff object file processing Affected: All versions, or not specified |
| CVE-2026-4775 | 7.8 | Mar 24 | Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing Affected: All versions, or not specified |
| CVE-2026-59850 | 7.5 | Jul 21 | Libssh: libssh: use-after-free via data callbacks on closed channels Affected: All versions, or not specified |
| CVE-2026-59849 | 7.5 | Jul 21 | Libssh: libssh: denial of service via automatic certificate authentication loop Affected: All versions, or not specified |
| CVE-2026-59847 | 7.5 | Jul 21 | Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification Affected: All versions, or not specified |
| CVE-2026-42009 | 7.5 | May 18 | Gnutls: gnutls: denial of service via dtls packet reordering vulnerability Affected: All versions, or not specified |
| CVE-2026-6732 | 7.5 | Apr 23 | Libxml2: libxml2: denial of service via crafted xsd-validated document Affected: All versions, or not specified |
| CVE-2026-1584 | 7.5 | Apr 9 | Gnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binder Affected: All versions, or not specified |
| CVE-2026-5121 | 7.5 | Mar 30 | Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing Affected: All versions, or not specified |
| CVE-2026-2100 | 7.5 | Mar 26 | P11-kit: null dereference via c_derivekey with specific null parameters Affected: All versions, or not specified |
| CVE-2026-4424 | 7.5 | Mar 19 | Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing Affected: All versions, or not specified |
| CVE-2026-3833 | 7.4 | Apr 30 | Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison Affected: All versions, or not specified |
| CVE-2026-71226 | 7.3 | Aug 5 | Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path Affected: All versions, or not specified |
| CVE-2026-15370 | 7.3 | Jul 21 | Libssh: libssh: stack buffer overflow in sftp server longname construction Affected: All versions, or not specified |
| CVE-2025-14821 | 7.0 | Apr 7 | Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows Affected: All versions, or not specified |
Showing 20
