StackRadar

CVE-2026-106436

Medium

Advisory

Published 13 Oct 2026In the index since 14 Oct 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
0.003
16th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1
of 18,143 indexed, latest versions
Container images
1
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 1 of 18,143 indexed charts deploy, on 1 image.

Affected packageAffected versionsFixed inImages
php-mongodbdeb2.1.4-4+ubuntu24.04.1+deb.sury.org+1no fix listed1
OSV records
UBUNTU-CVE-2026-106436

Charts affected

1 by stars
ChartLatestAffected imagesRadar Score
phpqonstruktVerified publisher0.2.01 of 1See more

php qonstrukt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-106436.

Container imageDigestPackageFixed in
qonstrukt/php:8.4-v8-apache089af7925aa1
php-mongodb@2.1.4-4+ubuntu24.04.1+deb.sury.org+1
no fix listed

Open the chart page →

63,878

Container images carrying it

1 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
qonstrukt/php:8.4-v8-apache089af7925aa1
php-mongodb@2.1.4-4+ubuntu24.04.1+deb.sury.org+1
no fix listed
1

syft 1.42.1 · advisories as of 17 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.