StackRadar

CVE-2026-10037

High

Advisory

Published 8 Jul 2026In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
12
of 17,781 indexed, latest versions
Container images
14
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 12 of 17,781 indexed charts deploy, on 14 images.

Affected packageAffected versionsFixed inImages
mailcapdeb3.70+nmu1ubuntu1, 3.75ubuntu13.70+nmu1ubuntu1.22.04.1, 3.70+nmu1ubuntu1.24.04.1, 3.75ubuntu1.114
OSV records
UBUNTU-CVE-2026-10037
Also known as
USN-8518-1

Charts affected

12 by stars
ChartLatestAffected imagesRadar Score
zabbixcetic3.1.31 of 5See more

zabbix cetic 3.1.3

1 of the 5 container images this version deploys carry CVE-2026-10037.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
mailcap@3.70+nmu1ubuntu1
3.70+nmu1ubuntu1.22.04.1

Open the chart page →

33,725
mattermostphntom3.24.01 of 2See more

mattermost phntom 3.24.0

1 of the 2 container images this version deploys carry CVE-2026-10037.

Container imageDigestPackageFixed in
phntom/mattermost-team-edition:9.3.051cf9da4aa2e
mailcap@3.70+nmu1ubuntu1
3.70+nmu1ubuntu1.22.04.1

Open the chart page →

8,722
aramid-indexerbiatec-repoVerified publisher3.9.03 of 5See more

aramid-indexer biatec-repo 3.9.0

3 of the 5 container images this version deploys carry CVE-2026-10037.

Container imageDigestPackageFixed in
scholtz2/aramid-algo-follow-node:v4.3.0-stable1ec63eca86b6
mailcap@3.70+nmu1ubuntu1
3.70+nmu1ubuntu1.24.04.1
scholtz2/aramid-conduit:v1.9.0-stable3a3b3d3277d2
mailcap@3.75ubuntu1
3.75ubuntu1.1
scholtz2/aramid-indexer:v3.9.0-stable6770214bc881
mailcap@3.75ubuntu1
3.75ubuntu1.1

Open the chart page →

13,357
aramid-participationbiatec-repoVerified publisher4.4.11 of 1See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-10037.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
mailcap@3.70+nmu1ubuntu1
3.70+nmu1ubuntu1.22.04.1

Open the chart page →

7,190
aramid-relaybiatec-repoVerified publisher4.4.11 of 1See more

aramid-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-10037.

Container imageDigestPackageFixed in
scholtz2/aramid-algo-node:v4.4.1-stable70263d8fab5b
mailcap@3.70+nmu1ubuntu1
3.70+nmu1ubuntu1.24.04.1

Open the chart page →

5,059
voimain-participationbiatec-repoVerified publisher4.4.11 of 1See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-10037.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
mailcap@3.70+nmu1ubuntu1
3.70+nmu1ubuntu1.22.04.1

Open the chart page →

7,190
owncloudkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 3See more

owncloud kubernetes-homelab-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-10037.

Container imageDigestPackageFixed in
owncloud/server:10.16.274c53d341076
mailcap@3.70+nmu1ubuntu1
3.70+nmu1ubuntu1.22.04.1

Open the chart page →

9,858
algorand-participationbiatec-repoVerified publisher4.4.11 of 1See more

algorand-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-10037.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
mailcap@3.70+nmu1ubuntu1
3.70+nmu1ubuntu1.22.04.1

Open the chart page →

7,190
algorand-relaybiatec-repoVerified publisher4.4.11 of 1See more

algorand-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-10037.

Container imageDigestPackageFixed in
scholtz2/algorand-relay-mainnet:4.4.1-stablee9af7d8ff6bb
mailcap@3.70+nmu1ubuntu1
3.70+nmu1ubuntu1.24.04.1

Open the chart page →

5,059
datacube-wpsdatacube-charts0.9.01 of 1See more

datacube-wps datacube-charts 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-10037.

Container imageDigestPackageFixed in
opendatacube/wps:latest80df355a660b
mailcap@3.70+nmu1ubuntu1
3.70+nmu1ubuntu1.22.04.1

Open the chart page →

6,172
nominatimheywood8-helm-chartsVerified publisher3.10.81 of 3See more

nominatim heywood8-helm-charts 3.10.8

1 of the 3 container images this version deploys carry CVE-2026-10037.

Container imageDigestPackageFixed in
mediagis/nominatim:4.2d0eae7b51374
mailcap@3.70+nmu1ubuntu1
3.70+nmu1ubuntu1.22.04.1

Open the chart page →

14,290
checkmkrtomik-helm-chartsVerified publisher0.1.01 of 1See more

checkmk rtomik-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-10037.

Container imageDigestPackageFixed in
checkmk/check-mk-community:2.5.0p6c11b422210c4
mailcap@3.70+nmu1ubuntu1
3.70+nmu1ubuntu1.22.04.1

Open the chart page →

7,436

Container images carrying it

14 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
checkmk/check-mk-community:2.5.0p6c11b422210c4
mailcap@3.70+nmu1ubuntu1
3.70+nmu1ubuntu1.22.04.1
1
mediagis/nominatim:4.2d0eae7b51374
mailcap@3.70+nmu1ubuntu1
3.70+nmu1ubuntu1.22.04.1
1
opendatacube/wps:latest80df355a660b
mailcap@3.70+nmu1ubuntu1
3.70+nmu1ubuntu1.22.04.1
1
owncloud/server:10.16.274c53d341076
mailcap@3.70+nmu1ubuntu1
3.70+nmu1ubuntu1.22.04.1
1
phntom/mattermost-team-edition:9.3.051cf9da4aa2e
mailcap@3.70+nmu1ubuntu1
3.70+nmu1ubuntu1.22.04.1
1
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
mailcap@3.70+nmu1ubuntu1
3.70+nmu1ubuntu1.22.04.1
1
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
mailcap@3.70+nmu1ubuntu1
3.70+nmu1ubuntu1.22.04.1
1
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
mailcap@3.70+nmu1ubuntu1
3.70+nmu1ubuntu1.22.04.1
1
scholtz2/algorand-relay-mainnet:4.4.1-stablee9af7d8ff6bb
mailcap@3.70+nmu1ubuntu1
3.70+nmu1ubuntu1.24.04.1
1
scholtz2/aramid-algo-follow-node:v4.3.0-stable1ec63eca86b6
mailcap@3.70+nmu1ubuntu1
3.70+nmu1ubuntu1.24.04.1
1
scholtz2/aramid-algo-node:v4.4.1-stable70263d8fab5b
mailcap@3.70+nmu1ubuntu1
3.70+nmu1ubuntu1.24.04.1
1
scholtz2/aramid-conduit:v1.9.0-stable3a3b3d3277d2
mailcap@3.75ubuntu1
3.75ubuntu1.1
1
scholtz2/aramid-indexer:v3.9.0-stable6770214bc881
mailcap@3.75ubuntu1
3.75ubuntu1.1
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
mailcap@3.70+nmu1ubuntu1
3.70+nmu1ubuntu1.22.04.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.