StackRadar

CVE-2026-107888

Medium

Advisory

Published 9 Oct 2026In the index since 10 Oct 2026
Severity
Medium
worst across findings
CVSS
5.1
base score, highest
EPSS
0.001
1st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
120
of 18,087 indexed, latest versions
Container images
96
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 120 of 18,087 indexed charts deploy, on 96 images.

Affected packageAffected versionsFixed inImages
cupsdeb2.4.2-3+deb12u4, 2.4.2-3+deb12u5, 2.4.2-3+deb12u8, 2.4.2-3+deb12u9+2 moreno fix listed96
OSV records
DEBIAN-CVE-2026-107888

Charts affected

120 by stars
ChartLatestAffected imagesRadar Score
flaresolverrrubxkubeVerified publisher0.1.11 of 1See more

flaresolverr rubxkube 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-107888.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
cups@2.4.2-3+deb12u9
no fix listed

Open the chart page →

32,574
uptime-kumarubxkubeVerified publisher1.2.11 of 1See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-107888.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.4.091e963bfda56
cups@2.4.2-3+deb12u9
no fix listed

Open the chart page →

36,696
wordpresssb-helm-charts0.4.01 of 2See more

wordpress sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-107888.

Container imageDigestPackageFixed in
library/wordpress:6.4.3-apache8ae66efb09a2
cups@2.4.2-3+deb12u5
no fix listed

Open the chart page →

15,447
wordpressschichtelVerified publisher0.10.101 of 2See more

wordpress schichtel 0.10.10

1 of the 2 container images this version deploys carry CVE-2026-107888.

Container imageDigestPackageFixed in
library/wordpress:6.9.4-fpmad4a8bae2eb4
cups@2.4.10-3+deb13u2
no fix listed

Open the chart page →

9,770
uptime-kumaschoenwald1.0.101 of 1See more

uptime-kuma schoenwald 1.0.10

1 of the 1 container images this version deploys carry CVE-2026-107888.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
cups@2.4.2-3+deb12u9
no fix listed

Open the chart page →

36,493
wordpress-mysqlsikalabs0.1.21 of 2See more

wordpress-mysql sikalabs 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-107888.

Container imageDigestPackageFixed in
library/wordpress:lateste04cf657f248
cups@2.4.10-3+deb13u2
no fix listed

Open the chart page →

4,037
deconzsmall-hack0.1.01 of 1See more

deconz small-hack 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-107888.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.26.123c86008d73f
cups@2.4.2-3+deb12u5
no fix listed

Open the chart page →

14,518
speckle-preview-service-branch-testing6speckleVerified publisher2.23.14-branch.testing6.334655-b4e04ee1 of 1See more

speckle-preview-service-branch-testing6 speckle 2.23.14-branch.testing6.334655-b4e04ee

1 of the 1 container images this version deploys carry CVE-2026-107888.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
cups@2.4.2-3+deb12u8
no fix listed

Open the chart page →

6,620
speckle-server-branch-hotfix-2.19.1speckleVerified publisher2.19.2-branch.hotfix-2.19.1.124125-665e7e11 of 5See more

speckle-server-branch-hotfix-2.19.1 speckle 2.19.2-branch.hotfix-2.19.1.124125-665e7e1

1 of the 5 container images this version deploys carry CVE-2026-107888.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
cups@2.4.2-3+deb12u5
no fix listed

Open the chart page →

18,204
speckle-server-branch-hotfix-2.20.2speckleVerified publisher2.20.3-branch.hotfix-2.20.2.149555-37ea0cb1 of 5See more

speckle-server-branch-hotfix-2.20.2 speckle 2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

1 of the 5 container images this version deploys carry CVE-2026-107888.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
cups@2.4.2-3+deb12u5
no fix listed

Open the chart page →

18,289
speckle-server-branch-testingspeckleVerified publisher2.17.14-branch.testing.72707.921a5f81 of 5See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

1 of the 5 container images this version deploys carry CVE-2026-107888.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
cups@2.4.2-3+deb12u5
no fix listed

Open the chart page →

16,316
speckle-server-branch-testing1speckleVerified publisher2.20.6-branch.testing1.154030-9b091141 of 5See more

speckle-server-branch-testing1 speckle 2.20.6-branch.testing1.154030-9b09114

1 of the 5 container images this version deploys carry CVE-2026-107888.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
cups@2.4.2-3+deb12u5
no fix listed

Open the chart page →

18,289
speckle-server-branch-testing2speckleVerified publisher2.18.11-branch.testing2.88634-335d4691 of 5See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

1 of the 5 container images this version deploys carry CVE-2026-107888.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d4694bd113093583
cups@2.4.2-3+deb12u5
no fix listed

Open the chart page →

15,937
speckle-server-branch-testing3speckleVerified publisher2.18.12-branch.testing3.88744-f55b3411 of 5See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

1 of the 5 container images this version deploys carry CVE-2026-107888.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.18.12-branch.testing3.88744-f55b3414bd113093583
cups@2.4.2-3+deb12u5
no fix listed

Open the chart page →

15,937
speckle-server-branch-testing4speckleVerified publisher2.20.2-branch.testing4.134160-9fad4b21 of 5See more

speckle-server-branch-testing4 speckle 2.20.2-branch.testing4.134160-9fad4b2

1 of the 5 container images this version deploys carry CVE-2026-107888.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
cups@2.4.2-3+deb12u5
no fix listed

Open the chart page →

17,857
speckle-server-branch-testing5speckleVerified publisher2.21.3-branch.testing5.219631-2153bef1 of 5See more

speckle-server-branch-testing5 speckle 2.21.3-branch.testing5.219631-2153bef

1 of the 5 container images this version deploys carry CVE-2026-107888.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
cups@2.4.2-3+deb12u8
no fix listed

Open the chart page →

17,486
speckle-server-branch-testing6speckleVerified publisher2.25.10-branch.testing6.645-b125c1e1 of 4See more

speckle-server-branch-testing6 speckle 2.25.10-branch.testing6.645-b125c1e

1 of the 4 container images this version deploys carry CVE-2026-107888.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
cups@2.4.2-3+deb12u8
no fix listed

Open the chart page →

12,598
flaresolverrsudo-kraken-flaresolverrVerified publisher2.1.41 of 1See more

flaresolverr sudo-kraken-flaresolverr 2.1.4

1 of the 1 container images this version deploys carry CVE-2026-107888.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
cups@2.4.2-3+deb12u9
no fix listed

Open the chart page →

39,222
Wordpresswordpress-mariadb1.0.21 of 2See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-107888.

Container imageDigestPackageFixed in
library/wordpress:latestf32ffa85064d
cups@2.4.10-3+deb13u2
no fix listed

Open the chart page →

5,757
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-107888.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latest1d8f72d2ce20
cups@2.4.2-3+deb12u9
no fix listed

Open the chart page →

5,125

Container images carrying it

96 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
moodlehq/moodle-php-apache:8.4-bookworm922af5166835
cups@2.4.2-3+deb12u9
no fix listed
1
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
cups@2.4.10-3+deb13u2
no fix listed
1
oneuptime/probe:releasea3cb2cd10b11
cups@2.4.2-3+deb12u9
no fix listed
1
onyxdotapp/onyx-backend:latest92b8fab500f9
cups@2.4.10-3+deb13u2
no fix listed
1
openhab/openhab:5.2.1bfd4a60e90da
cups@2.4.10-3+deb13u2
no fix listed
1
penpotapp/exporter:2.18.3418232d6ca31
cups@2.4.10-3+deb13u2+dhi4
no fix listed
1
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
cups@2.4.2-3+deb12u4
no fix listed
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
cups@2.4.2-3+deb12u8
no fix listed
1
speckle/speckle-preview-service:2.26.3092384dba45d
cups@2.4.2-3+deb12u9
no fix listed
1
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
cups@2.4.2-3+deb12u5
no fix listed
1
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
cups@2.4.2-3+deb12u8
no fix listed
1
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
cups@2.4.2-3+deb12u8
no fix listed
1
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
cups@2.4.2-3+deb12u8
no fix listed
1
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
cups@2.4.2-3+deb12u5
no fix listed
1
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
cups@2.4.2-3+deb12u5
no fix listed
1
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
cups@2.4.2-3+deb12u5
no fix listed
1
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
cups@2.4.2-3+deb12u5
no fix listed
1
swimmwatch/cloakbrowser-mcp:1.14.1f6986203a121
cups@2.4.2-3+deb12u9
no fix listed
1
thingsboard/tb-postgres:latest2d17e4e36edc
cups@2.4.2-3+deb12u9
no fix listed
1
tinymediamanager/tinymediamanager:5.3.448c15784a127
cups@2.4.10-3+deb13u2
no fix listed
1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
cups@2.4.10-3+deb13u2
no fix listed
1
ghcr.io/argonix-io/argonix-api:0.6.5431abcce7c1e
cups@2.4.10-3+deb13u2
no fix listed
1
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
cups@2.4.2-3+deb12u8
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.40d28dbd95b03
cups@2.4.2-3+deb12u9
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.369b1d3c09cfa
cups@2.4.2-3+deb12u9
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
cups@2.4.2-3+deb12u8
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
cups@2.4.2-3+deb12u9
no fix listed
1
ghcr.io/firecrawl/playwright-service:latest1f6eba640320
cups@2.4.2-3+deb12u9
no fix listed
1
ghcr.io/flanksource/facet:0.1.73a0323f4283e5
cups@2.4.2-3+deb12u9
no fix listed
1
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
cups@2.4.2-3+deb12u8
no fix listed
1
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
cups@2.4.2-3+deb12u9
no fix listed
1
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
cups@2.4.2-3+deb12u9
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
cups@2.4.2-3+deb12u8
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-load-generatorb130d6cee6cb
cups@2.4.2-3+deb12u9
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
cups@2.4.2-3+deb12u8
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
cups@2.4.10-3+deb13u2
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
cups@2.4.10-3+deb13u2
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
cups@2.4.10-3+deb13u2
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.10.1a132c2ac7c57
cups@2.4.2-3+deb12u5
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
cups@2.4.2-3+deb12u4
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
cups@2.4.10-3+deb13u2
no fix listed
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
cups@2.4.2-3+deb12u4
no fix listed
1
ghcr.io/wittdennis/calibre-web:1.1.2953aa0935251
cups@2.4.2-3+deb12u9
no fix listed
1
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
cups@2.4.2-3+deb12u9
no fix listed
1
ghcr.io/zammad/zammad:7.2.2-000017dec4f83fc1
cups@2.4.10-3+deb13u2
no fix listed
1
mcr.microsoft.com/playwright/mcp:v0.0.43e101b832b34d
cups@2.4.2-3+deb12u9
no fix listed
1

syft 1.42.1 · advisories as of 10 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.