CVE-2026-104086
MediumAdvisory
Published 14 Oct 2026In the index since 18 Oct 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.5
- base score, highest
- EPSS
- 0.002
- 8th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 14
- of 18,208 indexed, latest versions
- Container images
- 15
- deployed by those charts
- Fix available
- None
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 14 of 18,208 indexed charts deploy, on 15 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| p7zipdeb | 16.02+dfsg-6, 16.02+dfsg-7build1, 16.02+dfsg-8, 16.02+transitional.1 | no fix listed | 12 |
| 7zipdeb | 22.01+really26.02+dfsg-0+deb12u1, 23.01+dfsg-11, 25.01+dfsg-1~deb13u1, 26.00+dfsg-1 | no fix listed | 7 |
- OSV records
- DEBIAN-CVE-2026-104086UBUNTU-CVE-2026-104086
Charts affected
14 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| headwind-mdmchristianhuthVerified publisher | 6.0.0 | 1 of 1See more | 3,196 |
| machinarislib42Verified publisher | 0.2.0 | 1 of 1See more | 26,936 |
| sabnzbdgeek-cookbookVerified publisher | 9.4.2 | 1 of 1See more | 11,971 |
| iris-webappiris-webapp | 0.2.4 | 1 of 2See more | 13,628 |
| delugerubxkubeVerified publisher | 1.2.1 | 1 of 1See more | 14,282 |
| assemblylineassemblylineVerified publisher | 7.4.23 | 1 of 12See more | 8,485 |
| delugegeek-cookbookVerified publisher | 5.4.2 | 1 of 1See more | 14,292 |
| nzbgetgeek-cookbookVerified publisher | 12.4.2 | 1 of 1See more | 13,685 |
| qbittorrentgeek-cookbookVerified publisher | 13.5.2 | 1 of 1See more | 13,553 |
| transmissiongeek-cookbookVerified publisher | 8.4.3 | 1 of 1See more | 13,409 |
| webodmhelmforgeVerified publisher | 1.1.2 | 1 of 4See more | 13,061 |
| bluesky-pdsijmacd | 1.0.0 | 1 of 2See more | 10,494 |
| osdfir-infrastructureosdfir-infrastructureVerified publisher | 2.15.0 | 2 of 40See more | 242,131 |
| vrisingryuunosukeds3 | 0.1.0 | 1 of 1See more | 8,685 |
Container images carrying it
15 by charts deploying them
A fixed version is listed for 0 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| arunvelsriram/ | 655ad18fd8d6 | 7zip p7zip | no fix listed no fix listed | 1 |
| cccs/ | 21a93ecd44d2 | 7zip | no fix listed | 1 |
| headwindmdm/ | 3550b4840840 | p7zip | no fix listed | 1 |
| linuxserver/ | 0ac871624394 | p7zip | no fix listed | 1 |
| linuxserver/ | 2ce561a95e7b | p7zip | no fix listed | 1 |
| opendronemap/ | fcd99eb23d8d | 7zip p7zip | no fix listed no fix listed | 1 |
| trueosiris/ | 9356f98ad561 | p7zip | no fix listed | 1 |
| ghcr.io/ | e59ebde55709 | 7zip | no fix listed | 1 |
| ghcr.io/ | f77fa53b89cb | 7zip p7zip | no fix listed no fix listed | 1 |
| ghcr.io/ | e5571acd10ce | p7zip | no fix listed | 1 |
| ghcr.io/ | 61deadd1ec78 | p7zip | no fix listed | 1 |
| ghcr.io/ | c2d6e775db5a | p7zip | no fix listed | 1 |
| ghcr.io/ | 6011182e3946 | p7zip | no fix listed | 1 |
| ghcr.io/ | ec9fc5864cd5 | 7zip p7zip | no fix listed no fix listed | 1 |
| ghcr.io/ | 8caaf6e36654 | 7zip | no fix listed | 1 |