NixOS is a Linux distribution built on top of the Nix package manager. It is completely declarative, its system configurations are reproducible, makes configuration changes reliable and atomic, and eliminates configuration drift.

NixOS

Rsync is a utility for efficiently transferring and synchronizing files between a computer and an external hard drive, and across networked computers by comparing the modification times and sizes of files.

rsync

OpenJDK is a free distribution of the JDK, maintained by several vendors and the community. It is a development environment for building applications, applets, and components using the Java programming language.

OpenJDK JDK

CBL Marine is an open source distro, created by Microsoft. Mainly used in Azure cloud and Microsoft Internally.

CBL Mariner

Wolfi is a community Linux OS designed for the container and cloud-native era; it is a Linux distribution based on Alpine.

Wolfi

Chainguard is a Linux distribution based on Alpine. It's the commercial version of the Wolfi distro.

Chainguard

Homebrew is a free and open-source software package management system that simplifies the installation of software on Apple's macOS operating system and Linux. The name is intended to suggest the idea of building software on the Mac depending on the user's taste. Originally written by Max Howell, the package manager has gained popularity in the Ruby on Rails community and earned praise for its extensibility.

Homebrew

MinimOS is a minimalist operating system designed for simplicity and efficiency. It aims to provide only essential functionalities, making it lightweight and suitable for resource-constrained environments. MinimOS is often used in embedded systems or as a base for custom operating system development.

MinimOS

Debian GNU/Linux is a Linux distribution composed of free and open-source software.

Linux Debian

Red Hat Enterprise Linux is a Linux distribution developed by Red Hat for the commercial market.

Linux Red Hat

Linux openSUSE

Alpine Linux is a Linux distribution based on musl and BusyBox, designed for security, simplicity, and resource efficiency.

Linux Alpine

Echo is a secure, minimal Linux OS built vulnerability-free. It is fully compatible across environments and continuously patched - making it a clean, dependable base layer for modern applications. Echo is used by organizations focused on security and reliability, including those with compliance or FIPS requirements.

Echo

zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition.

CVE ID	Severity	Score	Technologies	Component name	CISA KEV exploit	Has fix	Published date
CVE-2026-30892	HIGH	7.8	NixOS	crun	No	Yes	Mar 26, 2026
CVE-2026-33223	MEDIUM	5.4	NixOS	nats-fips	No	Yes	Mar 25, 2026
CVE-2026-33222	MEDIUM	4.9	NixOS	nats-fips	No	Yes	Mar 25, 2026
CVE-2026-33249	MEDIUM	4.3	NixOS	k3s-1.32	No	Yes	Mar 25, 2026
CVE-2026-33248	MEDIUM	4.2	NixOS	github.com/nats-io/nats-server/v2	No	Yes	Mar 25, 2026

CVE-2026-27171:
NixOS vulnerability analysis and mitigation

5.5

Related NixOS vulnerabilities:

Benchmark your Cloud Security Posture

Additional Wiz resources

Cloud Vulnerability DB

Cloud Threat Landscape

PEACH

Ready to see Wiz in action?

CVE-2026-27171: NixOS vulnerability analysis and mitigation