StackRadar

CVE-2026-14191

High

Advisory

Published 1 Jul 2026In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.004
37th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
16
of 17,781 indexed, latest versions
Container images
16
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 16 of 17,781 indexed charts deploy, on 16 images.

Affected packageAffected versionsFixed inImages
unrar-nonfreedeb1:5.3.2-1+deb9u1build0.16.04.1, 1:5.5.8-1, 1:5.6.6-2build1, 1:6.1.5-1+1 moreno fix listed16
OSV records
UBUNTU-CVE-2026-14191

Charts affected

16 by stars
ChartLatestAffected imagesRadar Score
transmission-openvpnutkuozdemirVerified publisher2.5.01 of 1See more

transmission-openvpn utkuozdemir 2.5.0

1 of the 1 container images this version deploys carry CVE-2026-14191.

Container imageDigestPackageFixed in
haugene/transmission-openvpn:4.0059216cfae4b
unrar-nonfree@1:5.6.6-2build1
no fix listed

Open the chart page →

11,405
plexutkuozdemirVerified publisher2.1.11 of 1See more

plex utkuozdemir 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-14191.

Container imageDigestPackageFixed in
linuxserver/plex:1.25.24a13ced2326c
unrar-nonfree@1:5.6.6-2build1
no fix listed

Open the chart page →

6,348
bazarrgeek-cookbookVerified publisher10.6.21 of 1See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2026-14191.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
unrar-nonfree@1:5.6.6-2build1
no fix listed

Open the chart page →

17,377
lazylibrariangeek-cookbookVerified publisher7.4.21 of 1See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2026-14191.

Container imageDigestPackageFixed in
linuxserver/lazylibrarian:version-1152df82f93d2560e233
unrar-nonfree@1:5.5.8-1
no fix listed

Open the chart page →

11,662
sabnzbdgeek-cookbookVerified publisher9.4.21 of 1See more

sabnzbd geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2026-14191.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
unrar-nonfree@1:5.6.6-2build1
no fix listed

Open the chart page →

10,231
delugerubxkubeVerified publisher1.2.11 of 1See more

deluge rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-14191.

Container imageDigestPackageFixed in
linuxserver/deluge:18.04.10ac871624394
unrar-nonfree@1:5.5.8-1
no fix listed

Open the chart page →

13,541
plexbryanalves0.5.01 of 1See more

plex bryanalves 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-14191.

Container imageDigestPackageFixed in
plexinc/pms-docker:1.25.4.5487-648a8f9f946ea59b96f2b
unrar-nonfree@1:5.6.6-2build1
no fix listed

Open the chart page →

6,707
plexfydrah-charts2.2.01 of 1See more

plex fydrah-charts 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-14191.

Container imageDigestPackageFixed in
plexinc/pms-docker:1.19.5.3112-b23ab3896b598abb134ad
unrar-nonfree@1:5.3.2-1+deb9u1build0.16.04.1
no fix listed

Open the chart page →

8,965
calibre-webgeek-cookbookVerified publisher8.4.21 of 1See more

calibre-web geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-14191.

Container imageDigestPackageFixed in
linuxserver/calibre-web:version-0.6.12938810eca3d3
unrar-nonfree@1:5.6.6-2build1
no fix listed

Open the chart page →

16,123
delugegeek-cookbookVerified publisher5.4.21 of 1See more

deluge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-14191.

Container imageDigestPackageFixed in
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
unrar-nonfree@1:5.5.8-1
no fix listed

Open the chart page →

13,551
nzbgetgeek-cookbookVerified publisher12.4.21 of 1See more

nzbget geek-cookbook 12.4.2

1 of the 1 container images this version deploys carry CVE-2026-14191.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
unrar-nonfree@1:6.1.5-1
no fix listed

Open the chart page →

12,076
qbittorrentgeek-cookbookVerified publisher13.5.21 of 1See more

qbittorrent geek-cookbook 13.5.2

1 of the 1 container images this version deploys carry CVE-2026-14191.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/qbittorrent:v4.4.261deadd1ec78
unrar-nonfree@1:5.6.6-2build1
no fix listed

Open the chart page →

11,807
transmissiongeek-cookbookVerified publisher8.4.31 of 1See more

transmission geek-cookbook 8.4.3

1 of the 1 container images this version deploys carry CVE-2026-14191.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
unrar-nonfree@1:5.6.6-2build1
no fix listed

Open the chart page →

11,861
plex-media-serverplex-media-server1.9.01 of 1See more

plex-media-server plex-media-server 1.9.0

1 of the 1 container images this version deploys carry CVE-2026-14191.

Container imageDigestPackageFixed in
plexinc/pms-docker:1.43.3.10896-cb3ebc72d83a425ae9e13
unrar-nonfree@1:7.0.7-1build1
no fix listed

Open the chart page →

931
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-14191.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
unrar-nonfree@1:5.6.6-2build1
no fix listed

Open the chart page →

30,687
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-14191.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
unrar-nonfree@1:5.6.6-2build1
no fix listed

Open the chart page →

18,756

Container images carrying it

16 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
haugene/transmission-openvpn:4.0059216cfae4b
unrar-nonfree@1:5.6.6-2build1
no fix listed
1
linuxserver/calibre-web:version-0.6.12938810eca3d3
unrar-nonfree@1:5.6.6-2build1
no fix listed
1
linuxserver/deluge:18.04.10ac871624394
unrar-nonfree@1:5.5.8-1
no fix listed
1
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
unrar-nonfree@1:5.5.8-1
no fix listed
1
linuxserver/lazylibrarian:version-1152df82f93d2560e233
unrar-nonfree@1:5.5.8-1
no fix listed
1
linuxserver/plex:1.25.24a13ced2326c
unrar-nonfree@1:5.6.6-2build1
no fix listed
1
plexinc/pms-docker:1.25.4.5487-648a8f9f946ea59b96f2b
unrar-nonfree@1:5.6.6-2build1
no fix listed
1
plexinc/pms-docker:1.43.3.10896-cb3ebc72d83a425ae9e13
unrar-nonfree@1:7.0.7-1build1
no fix listed
1
plexinc/pms-docker:1.19.5.3112-b23ab3896b598abb134ad
unrar-nonfree@1:5.3.2-1+deb9u1build0.16.04.1
no fix listed
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
unrar-nonfree@1:5.6.6-2build1
no fix listed
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
unrar-nonfree@1:5.6.6-2build1
no fix listed
1
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
unrar-nonfree@1:5.6.6-2build1
no fix listed
1
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
unrar-nonfree@1:6.1.5-1
no fix listed
1
ghcr.io/k8s-at-home/qbittorrent:v4.4.261deadd1ec78
unrar-nonfree@1:5.6.6-2build1
no fix listed
1
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
unrar-nonfree@1:5.6.6-2build1
no fix listed
1
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
unrar-nonfree@1:5.6.6-2build1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.