StackRadar

CVE-2026-15060

Medium

Advisory

Published 10 Aug 2026In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
4.7
base score, highest
EPSS
0.001
0th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
21
of 17,781 indexed, latest versions
Container images
21
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 21 of 17,781 indexed charts deploy, on 21 images.

Affected packageAffected versionsFixed inImages
systemddeb259.5-0ubuntu3, 259.5-0ubuntu3.3259.5-0ubuntu3.421
OSV records
UBUNTU-CVE-2026-15060
Also known as
USN-8626-1

Charts affected

21 by stars
ChartLatestAffected imagesRadar Score
akhqakhq0.28.01 of 1See more

akhq akhq 0.28.0

1 of the 1 container images this version deploys carry CVE-2026-15060.

Container imageDigestPackageFixed in
tchiotludo/akhq:0.28.0c2824dc2ae44
systemd@259.5-0ubuntu3.3
259.5-0ubuntu3.4

Open the chart page →

1,548
postgresqlkubelauncherVerified publisher0.4.31 of 1See more

postgresql kubelauncher 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-15060.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/postgresqldigest-pinned1a27e11e5925
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4

Open the chart page →

1,115
cassandrakubelauncherVerified publisher0.1.271 of 1See more

cassandra kubelauncher 0.1.27

1 of the 1 container images this version deploys carry CVE-2026-15060.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/cassandradigest-pinnedb66aba320083
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4

Open the chart page →

1,442
mongodbkubelauncherVerified publisher0.4.51 of 1See more

mongodb kubelauncher 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-15060.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/mongodbdigest-pinned9bc37ed78a8b
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4

Open the chart page →

1,342
rediskubelauncherVerified publisher0.5.11 of 1See more

redis kubelauncher 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-15060.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/redisdigest-pinnedbcd8e9a6224f
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4

Open the chart page →

770
photoprismandrenarchyVerified publisher8.15.01 of 1See more

photoprism andrenarchy 8.15.0

1 of the 1 container images this version deploys carry CVE-2026-15060.

Container imageDigestPackageFixed in
photoprism/photoprism:260728958642220223
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4

Open the chart page →

8,825
sops-secrets-operatorsops-secrets-operatorVerified publisher0.28.11 of 1See more

sops-secrets-operator sops-secrets-operator 0.28.1

1 of the 1 container images this version deploys carry CVE-2026-15060.

Container imageDigestPackageFixed in
quay.io/isindir/sops-secrets-operator:0.21.27bba7083dfa0
systemd@259.5-0ubuntu3.3
259.5-0ubuntu3.4

Open the chart page →

781
aramid-indexerbiatec-repoVerified publisher3.9.02 of 5See more

aramid-indexer biatec-repo 3.9.0

2 of the 5 container images this version deploys carry CVE-2026-15060.

Container imageDigestPackageFixed in
scholtz2/aramid-conduit:v1.9.0-stable3a3b3d3277d2
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4
scholtz2/aramid-indexer:v3.9.0-stable6770214bc881
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4

Open the chart page →

13,357
hivemq-platform-operatorhivemqOfficialVerified publisher0.2.261 of 1See more

hivemq-platform-operator hivemq 0.2.26

1 of the 1 container images this version deploys carry CVE-2026-15060.

Container imageDigestPackageFixed in
hivemq/hivemq-platform-operator:2.2.2a919f990141b
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4

Open the chart page →

881
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2026-15060.

Container imageDigestPackageFixed in
treskon/portrait:DEV-latest88e813f22347
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4

Open the chart page →

31,844
mikochizer0tonin1.11.01 of 1See more

mikochi zer0tonin 1.11.0

1 of the 1 container images this version deploys carry CVE-2026-15060.

Container imageDigestPackageFixed in
zer0tonin/mikochi:1.11.009872bae1554
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4

Open the chart page →

951
akto-ai-guardrails-v2akto0.3.01 of 6See more

akto-ai-guardrails-v2 akto 0.3.0

1 of the 6 container images this version deploys carry CVE-2026-15060.

Container imageDigestPackageFixed in
aktosecurity/data-ingestion-service:1.4.946ed5bcb04b2
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4

Open the chart page →

9,321
nvidia-gpu-exporterdanchevVerified publisher1.0.31 of 1See more

nvidia-gpu-exporter danchev 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-15060.

Container imageDigestPackageFixed in
ghcr.io/utkuozdemir/nvidia_gpu_exporter:1.5.0d75967a4dd72
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4

Open the chart page →

1,184
nethermindethereum-helm-chartsVerified publisher1.1.21 of 2See more

nethermind ethereum-helm-charts 1.1.2

1 of the 2 container images this version deploys carry CVE-2026-15060.

Container imageDigestPackageFixed in
nethermind/nethermind:latest1b6b01419de4
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4

Open the chart page →

933
komgahelmforgeVerified publisher1.4.151 of 1See more

komga helmforge 1.4.15

1 of the 1 container images this version deploys carry CVE-2026-15060.

Container imageDigestPackageFixed in
gotson/komga:1.26.36c2a967bbe9a
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4

Open the chart page →

2,261
paperlesshpVerified publisher0.1.11 of 5See more

paperless hp 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-15060.

Container imageDigestPackageFixed in
apache/tika:3.3.1.090b7fa1dc018
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4

Open the chart page →

26,612
management-portalradar-baseVerified publisher1.7.01 of 1See more

management-portal radar-base 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-15060.

Container imageDigestPackageFixed in
ghcr.io/radar-base/managementportal/management-portal:3.0.0c1b37e821f72
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4

Open the chart page →

3,182
komgarubxkubeVerified publisher0.1.31 of 1See more

komga rubxkube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-15060.

Container imageDigestPackageFixed in
gotson/komga:1.26.36c2a967bbe9a
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4

Open the chart page →

2,261
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-15060.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4

Open the chart page →

10,348
bootzookasoftwaremillVerified publisher0.2.11 of 2See more

bootzooka softwaremill 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-15060.

Container imageDigestPackageFixed in
softwaremill/bootzooka:latest845b5e8f8056
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4

Open the chart page →

3,003
tekton-stash-and-cachetekton-stash-and-cacheVerified publisher0.2.21 of 1See more

tekton-stash-and-cache tekton-stash-and-cache 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-15060.

Container imageDigestPackageFixed in
quay.io/poundex/tekton-stash-and-cache:0.2.2e854423caa09
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4

Open the chart page →

1,082

Container images carrying it

21 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
gotson/komga:1.26.36c2a967bbe9a
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4
2
aktosecurity/data-ingestion-service:1.4.946ed5bcb04b2
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4
1
apache/tika:3.3.1.090b7fa1dc018
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4
1
hivemq/hivemq-platform-operator:2.2.2a919f990141b
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4
1
nethermind/nethermind:latest1b6b01419de4
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4
1
photoprism/photoprism:260601650c6ad5a651
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4
1
photoprism/photoprism:260728958642220223
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4
1
scholtz2/aramid-conduit:v1.9.0-stable3a3b3d3277d2
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4
1
scholtz2/aramid-indexer:v3.9.0-stable6770214bc881
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4
1
softwaremill/bootzooka:latest845b5e8f8056
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4
1
tchiotludo/akhq:0.28.0c2824dc2ae44
systemd@259.5-0ubuntu3.3
259.5-0ubuntu3.4
1
treskon/portrait:DEV-latest88e813f22347
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4
1
zer0tonin/mikochi:1.11.009872bae1554
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4
1
ghcr.io/kubelauncher/cassandrab66aba320083
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4
1
ghcr.io/kubelauncher/mongodb9bc37ed78a8b
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4
1
ghcr.io/kubelauncher/postgresql1a27e11e5925
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4
1
ghcr.io/kubelauncher/redisbcd8e9a6224f
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4
1
ghcr.io/radar-base/managementportal/management-portal:3.0.0c1b37e821f72
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4
1
ghcr.io/utkuozdemir/nvidia_gpu_exporter:1.5.0d75967a4dd72
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4
1
quay.io/isindir/sops-secrets-operator:0.21.27bba7083dfa0
systemd@259.5-0ubuntu3.3
259.5-0ubuntu3.4
1
quay.io/poundex/tekton-stash-and-cache:0.2.2e854423caa09
systemd@259.5-0ubuntu3
259.5-0ubuntu3.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.