StackRadar

CVE-2026-15059

Medium

Advisory

Published 10 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,844
of 17,803 indexed, latest versions
Container images
1,803
deployed by those charts
Fix available
2 of 2
affected packages

CVE-2026-15059 affecting package systemd for versions less than 255-34

Carried by container images the latest versions of 1,844 of 17,803 indexed charts deploy, on 1,803 images.

Affected packageAffected versionsFixed inImages
systemddeb249.11-0ubuntu3, 249.11-0ubuntu3.1, 249.11-0ubuntu3.3, 249.11-0ubuntu3.4+47 more249.11-0ubuntu3.22, 255.4-1ubuntu8.17, 257.13-1~deb13u1+e2, 259.5-0ubuntu3.41,798
systemdrpm255-33.azl3255-345
OSV records
DEBIAN-CVE-2026-15059UBUNTU-CVE-2026-15059AZL-95640ECHO-1f2a-a632-ee71
Also known as
USN-8626-1

Charts affected

1,844 by stars
ChartLatestAffected imagesRadar Score
ocellusaiocellusaiVerified publisher0.1.121 of 2See more

ocellusai ocellusai 0.1.12

1 of the 2 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
quay.io/ocellusai/operator:v0.10.59ff01f642e2b
systemd@257.13-1~deb13u1
no fix listed

Open the chart page →

1,211
lensoci-ai-incubations0.1.141 of 16See more

lens oci-ai-incubations 0.1.14

1 of the 16 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
library/postgres:134689940c6838
systemd@257.8-1~deb13u2
no fix listed

Open the chart page →

17,257
octantisoctantis0.1.01 of 1See more

octantis octantis 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
ghcr.io/vinny1892/octantis:latest45459c0910fc
systemd@257.9-1~deb13u1
no fix listed

Open the chart page →

2,618
mockoidcoidcmockVerified publisher0.0.11 of 1See more

mockoidc oidcmock 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
marcoimme/oidcmock:latestb6035c0721a8
systemd@257.9-1~deb13u1
no fix listed

Open the chart page →

2,347
web-chartoje-ktcloudlab0.1.01 of 1See more

web-chart oje-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
systemd@257.13-1~deb13u1
no fix listed

Open the chart page →

1,879
ojp-serverojp0.1.51 of 1See more

ojp-server ojp 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
rrobetti/ojp:0.1.0-beta1141bd88232b
systemd@255.4-1ubuntu8.4
255.4-1ubuntu8.17

Open the chart page →

2,652
automx2oleds-helm-chartsVerified publisher1.0.51 of 1See more

automx2 oleds-helm-charts 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
oled01/automx2:2025.1.105d3e398e675
systemd@252.38-1~deb12u1
no fix listed

Open the chart page →

5,385
cmsmsoleds-helm-chartsVerified publisher0.1.61 of 1See more

cmsms oleds-helm-charts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.4.7-debian-12-r290dc6acb7b2e
systemd@252.38-1~deb12u1
no fix listed

Open the chart page →

2,899
db-backupoleds-helm-chartsVerified publisher0.1.01 of 1See more

db-backup oleds-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
oled01/db-backup:0.1.06302fd2b5333
systemd@249.11-0ubuntu3.6
249.11-0ubuntu3.22

Open the chart page →

8,146
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
systemd@249.11-0ubuntu3.9
249.11-0ubuntu3.22

Open the chart page →

9,237
laravel-appoli-the-devVerified publisher2.0.171 of 1See more

laravel-app oli-the-dev 2.0.17

1 of the 1 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
serversideup/php:8.5-fpm-nginx8f8c2f010ac5
systemd@257.13-1~deb13u1
no fix listed

Open the chart page →

2,860
node-appoli-the-devVerified publisher1.0.01 of 1See more

node-app oli-the-dev 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
library/node:22-bookworm-slim83f487e0a634
systemd@252.39-1~deb12u2
no fix listed

Open the chart page →

1,198
paperless-ngxoli-the-devVerified publisher1.1.11 of 1See more

paperless-ngx oli-the-dev 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
systemd@257.13-1~deb13u1
no fix listed

Open the chart page →

4,679
cron-jobonechart-slVerified publisher0.73.71 of 1See more

cron-job onechart-sl 0.73.7

1 of the 1 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
library/debian:stable-slim04634311a8d5
systemd@257.13-1~deb13u1
no fix listed

Open the chart page →

1,004
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
systemd@255.4-1ubuntu8.6
255.4-1ubuntu8.17

Open the chart page →

6,148
ontoserverontoserverVerified publisher0.5.21 of 2See more

ontoserver ontoserver 0.5.2

1 of the 2 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
systemd@257.13-1~deb13u1
no fix listed

Open the chart page →

1,686
onyx-stackonyx0.3.11 of 12See more

onyx-stack onyx 0.3.1

1 of the 12 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
onyxdotapp/onyx-backend:latest473fdffe4e67
systemd@257.13-1~deb13u1
no fix listed

Open the chart page →

6,697
commonground-gatewayopencatalogi1.5.31 of 7See more

commonground-gateway opencatalogi 1.5.3

1 of the 7 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
systemd@252.6-1
no fix listed

Open the chart page →

9,723
opentickopenchartVerified publisher0.1.01 of 1See more

opentick openchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
library/nginx:1.25.5a484819eb602
systemd@252.22-1~deb12u1
no fix listed

Open the chart page →

5,674
opencost-parquet-exporteropencostVerified publisher0.3.11 of 1See more

opencost-parquet-exporter opencost 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
systemd@252.33-1~deb12u1
no fix listed

Open the chart page →

11,088
openlit-controlleropenlit0.10.01 of 1See more

openlit-controller openlit 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
ghcr.io/openlit/openlit-controller:0.10.0165efd4469ea
systemd@252.39-1~deb12u2
no fix listed

Open the chart page →

1,412
openpanelopenpanel0.9.01 of 6See more

openpanel openpanel 0.9.0

1 of the 6 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:25.10.2.65e019438e1e05
systemd@249.11-0ubuntu3.16
249.11-0ubuntu3.22

Open the chart page →

3,477
llm-stackopenproject-helm-chartsVerified publisher1.1.02 of 2See more

llm-stack openproject-helm-charts 1.1.0

2 of the 2 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
apache/apisix:3.16.0-ubuntu5e47692cac00
systemd@255.4-1ubuntu8.14
255.4-1ubuntu8.17
library/python:3.12-slim78387bc3881b
systemd@257.13-1~deb13u1
no fix listed

Open the chart page →

2,032
fineractopenshift0.1.11 of 4See more

fineract openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
systemd@257.13-1~deb13u1
no fix listed

Open the chart page →

7,889
sohaopensohaVerified publisher0.1.91 of 2See more

soha opensoha 0.1.9

1 of the 2 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
pgvector/pgvector:0.8.5-pg18-trixie9d2e61c7352b
systemd@257.13-1~deb13u1
no fix listed

Open the chart page →

1,818
terminalsopen-webui0.7.02 of 2See more

terminals open-webui 0.7.0

2 of the 2 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
ghcr.io/open-webui/terminals:latest5d2fd44366a4
systemd@257.13-1~deb13u1
no fix listed
ghcr.io/open-webui/terminals-operator:latest6287ce8be502
systemd@257.13-1~deb13u1
no fix listed

Open the chart page →

2,098
hiveopstty0.1.91 of 4See more

hive opstty 0.1.9

1 of the 4 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16233f361c5819
systemd@252.31-1~deb12u1
no fix listed

Open the chart page →

4,732
grrosdfir-infrastructureVerified publisher1.0.32 of 5See more

grr osdfir-infrastructure 1.0.3

2 of the 5 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
library/mariadb:11.3.2e101f9db3191
systemd@249.11-0ubuntu3.12
249.11-0ubuntu3.22
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
systemd@252.26-1~deb12u2
no fix listed

Open the chart page →

11,047
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.025 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

25 of the 40 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
bitnamilegacy/git:latest4b08d0c5af8d
systemd@252.38-1~deb12u1
no fix listed
chromadb/chroma:1.5.7fc8dc8e11fb2
systemd@257.9-1~deb13u1
no fix listed
library/mariadb:11.3.2e101f9db3191
systemd@249.11-0ubuntu3.12
249.11-0ubuntu3.22
yetiplatform/yeti:2.9.09bcbe2650a14
systemd@257.13-1~deb13u1
no fix listed
yetiplatform/yeti-frontend:2.9.0873ef15d267b
systemd@257.13-1~deb13u1
no fix listed
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
systemd@252.26-1~deb12u2
no fix listed
ghcr.io/openrelik/openrelik-mediator:latest42efc445b19e
systemd@252.39-1~deb12u2
no fix listed
ghcr.io/openrelik/openrelik-metrics:latest3d0f1ddeebf5
systemd@252.39-1~deb12u1
no fix listed
ghcr.io/openrelik/openrelik-server:latestce1132261523
systemd@252.39-1~deb12u2
no fix listed
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
systemd@255.4-1ubuntu8.16
255.4-1ubuntu8.17
ghcr.io/openrelik/openrelik-worker-analyzer-logs:latestb175cc61959a
systemd@255.4-1ubuntu8.16
255.4-1ubuntu8.17
ghcr.io/openrelik/openrelik-worker-bulkextractor:latest67498ee2e639
systemd@255.4-1ubuntu8.16
255.4-1ubuntu8.17
ghcr.io/openrelik/openrelik-worker-capa:latest71323a4f3fc5
systemd@255.4-1ubuntu8.16
255.4-1ubuntu8.17
ghcr.io/openrelik/openrelik-worker-chromecreds:latest76d4fbcc6ff0
systemd@255.4-1ubuntu8.16
255.4-1ubuntu8.17
ghcr.io/openrelik/openrelik-worker-cloud-logs:latesta5d7e3cf71d3
systemd@255.4-1ubuntu8.16
255.4-1ubuntu8.17
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
systemd@255.4-1ubuntu8.16
255.4-1ubuntu8.17
ghcr.io/openrelik/openrelik-worker-dfindexeddb:latest31966a825782
systemd@255.4-1ubuntu8.16
255.4-1ubuntu8.17
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
systemd@255.4-1ubuntu8.16
255.4-1ubuntu8.17
ghcr.io/openrelik/openrelik-worker-floss:latest7a331eb83c6a
systemd@255.4-1ubuntu8.16
255.4-1ubuntu8.17
ghcr.io/openrelik/openrelik-worker-grep:latest470ff3529746
systemd@255.4-1ubuntu8.16
255.4-1ubuntu8.17
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
systemd@255.4-1ubuntu8.16
255.4-1ubuntu8.17
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
systemd@255.4-1ubuntu8.16
255.4-1ubuntu8.17
ghcr.io/openrelik/openrelik-worker-strings:latest6e05055b701f
systemd@255.4-1ubuntu8.16
255.4-1ubuntu8.17
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
systemd@255.4-1ubuntu8.16
255.4-1ubuntu8.17
ghcr.io/openrelik/openrelik-worker-yara:latestbd7fbf4505b5
systemd@255.4-1ubuntu8.16
255.4-1ubuntu8.17

Open the chart page →

184,580
yetiosdfir-infrastructureVerified publisher1.0.52 of 4See more

yeti osdfir-infrastructure 1.0.5

2 of the 4 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
yetiplatform/yeti:latest9c3006cedcca
systemd@257.13-1~deb13u1
no fix listed
yetiplatform/yeti-frontend:latest709064278c7e
systemd@257.13-1~deb13u1
no fix listed

Open the chart page →

6,756
fluent-bitot-container-kit0.0.31 of 2See more

fluent-bit ot-container-kit 0.0.3

1 of the 2 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
quay.io/opstree/fluent-bit:5.0.3391eef5a68ff
systemd@257.9-1~deb13u1
no fix listed

Open the chart page →

925
webot-container-kit0.1.01 of 1See more

web ot-container-kit 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
systemd@257.13-1~deb13u1
no fix listed

Open the chart page →

1,879
workerot-container-kit0.1.01 of 1See more

worker ot-container-kit 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
systemd@257.13-1~deb13u1
no fix listed

Open the chart page →

1,879
lens-metric-proxyowan-charts0.1.01 of 1See more

lens-metric-proxy owan-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
systemd@257.13-1~deb13u1
no fix listed

Open the chart page →

1,879
automatap2p-avs0.1.01 of 2See more

automata p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
ghcr.io/foundry-rs/foundry:latest0c00cb0bda1a
systemd@249.11-0ubuntu3.17
249.11-0ubuntu3.22

Open the chart page →

3,685
avap2p-avs0.1.01 of 1See more

ava p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
avaprotocol/ap-avs:1.2.0c430ea5c37d6
systemd@252.26-1~deb12u2
no fix listed

Open the chart page →

3,354
k3p2p-avs0.1.51 of 2See more

k3 p2p-avs 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
ghcr.io/foundry-rs/foundry:latest0c00cb0bda1a
systemd@249.11-0ubuntu3.17
249.11-0ubuntu3.22

Open the chart page →

2,355
mishtip2p-avs0.1.01 of 2See more

mishti p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
ghcr.io/foundry-rs/foundry:latest0c00cb0bda1a
systemd@249.11-0ubuntu3.17
249.11-0ubuntu3.22

Open the chart page →

4,065
radiusp2p-avs0.1.01 of 1See more

radius p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
theradius/loggia:0.463ba348546ec
systemd@252.19-1~deb12u1
no fix listed

Open the chart page →

12,449
ungatep2p-avs0.1.03 of 3See more

ungate p2p-avs 0.1.0

3 of the 3 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
systemd@252.26-1~deb12u2
no fix listed
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
systemd@252.26-1~deb12u2
no fix listed
ghcr.io/foundry-rs/foundry:latest0c00cb0bda1a
systemd@249.11-0ubuntu3.17
249.11-0ubuntu3.22

Open the chart page →

27,640
p4p40.1.02 of 7See more

p4 p4 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
library/rabbitmq:3.11-managementc3f70098e01d
systemd@249.11-0ubuntu3.12
249.11-0ubuntu3.22
mastercloudapps/planner:v1.2340a950b311b2
systemd@249.11-0ubuntu3.7
249.11-0ubuntu3.22

Open the chart page →

27,834
pacmanpacman-mhVerified publisher0.1.281 of 2See more

pacman pacman-mh 0.1.28

1 of the 2 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
library/mongo:7.0.28-jammy88785f6f665a
systemd@249.11-0ubuntu3.17
249.11-0ubuntu3.22

Open the chart page →

3,617
istio-operatorparticuleio1.7.01 of 1See more

istio-operator particuleio 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
gcr.io/istio-testing/operator:latest8d4576f7b98f
systemd@255.4-1ubuntu8
255.4-1ubuntu8.17

Open the chart page →

4,186
ctfdpascaliskeVerified publisher2.0.01 of 1See more

ctfd pascaliske 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
ghcr.io/ctfd/ctfd:3.8.2870e396fddf8
systemd@252.39-1~deb12u1
no fix listed

Open the chart page →

2,419
linkdingpascaliskeVerified publisher3.0.01 of 1See more

linkding pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
ghcr.io/sissbruecker/linkding:1.45.061b2eb9eed8e
systemd@257.8-1~deb13u2
no fix listed

Open the chart page →

3,907
vaultwardenpascaliskeVerified publisher2.0.01 of 1See more

vaultwarden pascaliske 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
ghcr.io/dani-garcia/vaultwarden:1.35.2d89a6d21e361
systemd@257.9-1~deb13u1
no fix listed

Open the chart page →

3,450
examplepauls-helm-charts0.1.21 of 1See more

example pauls-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
systemd@257.13-1~deb13u1
no fix listed

Open the chart page →

1,879
kubeconpauls-helm-charts0.1.01 of 1See more

kubecon pauls-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
systemd@257.13-1~deb13u1
no fix listed

Open the chart page →

1,879
matomopetbattle11.0.12 of 2See more

matomo petbattle 11.0.1

2 of the 2 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:12.0.2-debian-12-r0888cdaae3cb9
systemd@252.38-1~deb12u1
no fix listed
bitnamilegacy/matomo:5.3.2-debian-12-r13f02c000c54b1
systemd@252.38-1~deb12u1
no fix listed

Open the chart page →

11,177
pet-battle-nsffpetbattle0.0.21 of 4See more

pet-battle-nsff petbattle 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-15059.

Container imageDigestPackageFixed in
tensorflow/serving:latest8a208c232297
systemd@249.11-0ubuntu3.17
249.11-0ubuntu3.22

Open the chart page →

3,878

Container images carrying it

1,803 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
systemd@252.39-1~deb12u2
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
systemd@252.39-1~deb12u2
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
systemd@252.36-1~deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.