StackRadar

CVE-2026-15146

Medium

Advisory

Published 10 Jul 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.002
6th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
503
of 17,787 indexed, latest versions
Container images
486
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 503 of 17,787 indexed charts deploy, on 486 images.

Affected packageAffected versionsFixed inImages
wgetdeb1.15-1ubuntu1, 1.15-1ubuntu1.14.04.1, 1.15-1ubuntu1.14.04.4, 1.17.1-1ubuntu1.3+17 more1.15-1ubuntu1.14.04.5+esm3, 1.17.1-1ubuntu1.5+esm4, 1.19.4-1ubuntu2.2+esm4, 1.20.3-1ubuntu2.1+esm3+3 more486
OSV records
DEBIAN-CVE-2026-15146UBUNTU-CVE-2026-15146
Also known as
USN-8572-1

Charts affected

503 by stars
ChartLatestAffected imagesRadar Score
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-15146.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
wget@1.21.2-2ubuntu1.1
1.21.2-2ubuntu1.4

Open the chart page →

14,100
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-15146.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
wget@1.21.3-1+b2
no fix listed

Open the chart page →

13,677
clickhousezloi-space1.2.01 of 3See more

clickhouse zloi-space 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-15146.

Container imageDigestPackageFixed in
yandex/clickhouse-server:21.3.204eccfffb01d7
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1+esm3

Open the chart page →

9,207

Container images carrying it

486 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
thmmniii/fbs-core:v1.27.15438517d9fc2
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.4
1
thongngo3301/stakefish:latesta341af5976e3
wget@1.21.3-1+b2
no fix listed
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
wget@1.17.1-1ubuntu1.3
1.17.1-1ubuntu1.5+esm4
1
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
wget@1.25.0-2
no fix listed
1
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
wget@1.21.3-1+b2
no fix listed
1
trinodb/trino:405ee80ab5eeab2
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.4
1
trueosiris/vrising:latest9356f98ad561
wget@1.21.2-2ubuntu1.1
1.21.2-2ubuntu1.4
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
wget@1.21.3-1+deb12u1
no fix listed
1
vinanrra/7dtd-server:v0.4.4f9534490bd2b
wget@1.19.4-1ubuntu2.2
1.19.4-1ubuntu2.2+esm4
1
vlebediantsev/notes-admin-front:latest007c6670ff48
wget@1.21.3-1+b2
no fix listed
1
vlebediantsev/notes-project-front:latest945675fd2636
wget@1.21.3-1+b2
no fix listed
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
wget@1.21.3-1+b2
no fix listed
1
voltha/voltha-cli:1.6.0c4e41e92f046
wget@1.17.1-1ubuntu1.4
1.17.1-1ubuntu1.5+esm4
1
voltha/voltha-netconf:1.6.037f80524c207
wget@1.17.1-1ubuntu1.4
1.17.1-1ubuntu1.5+esm4
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
wget@1.17.1-1ubuntu1.4
1.17.1-1ubuntu1.5+esm4
1
voltha/voltha-tester:1.7.0655c3048a602
wget@1.17.1-1ubuntu1.5
1.17.1-1ubuntu1.5+esm4
1
wallarm/aih-scanner:2.7.11f1cb26db1f5b
wget@1.25.0-2
no fix listed
1
wger/server:2.6997ead43aabd
wget@1.21.4-1ubuntu4.1
1.21.4-1ubuntu4.4
1
wiktorn/overpass-api:latest9bb5f4a9b54c
wget@1.21.3-1+deb12u1
no fix listed
1
wistefan/mvf:lateste0887302b2d8
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.4
1
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
wget@1.21.2-2ubuntu1.1
1.21.2-2ubuntu1.4
1
xeotek/kadeck:6.3.439a3b37a17c5
wget@1.21.2-2ubuntu1.1
1.21.2-2ubuntu1.4
1
xeotek/kadeck:4.2.94c6b04d9ce55
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1+esm3
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
wget@1.21.3-1+b2
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
wget@1.21.3-1+b2
no fix listed
1
yandex/clickhouse-server:latest1cbf75aabe1e
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1+esm3
1
yandex/clickhouse-server:21.3.204eccfffb01d7
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1+esm3
1
yandex/clickhouse-server:19.17ab1738a64b70
wget@1.19.4-1ubuntu2.2
1.19.4-1ubuntu2.2+esm4
1
yandex/clickhouse-server:19.14ccf9c2b5e3f2
wget@1.19.4-1ubuntu2.2
1.19.4-1ubuntu2.2+esm4
1
yandex/clickhouse-server:19.16d210dc69321e
wget@1.19.4-1ubuntu2.2
1.19.4-1ubuntu2.2+esm4
1
zabbix/zabbix-server-mysql:ubuntu-6.4-latest55d074b6b031
wget@1.21.4-1ubuntu4.1
1.21.4-1ubuntu4.4
1
zabbix/zabbix-server-pgsql:ubuntu-5.4.66c946b1f45cd
wget@1.20.3-1ubuntu1
1.20.3-1ubuntu2.1+esm3
1
zabbix/zabbix-server-pgsql:ubuntu-7.0.237e8c8e059533
wget@1.21.4-1ubuntu4.1
1.21.4-1ubuntu4.4
1
zabbix/zabbix-server-pgsql:ubuntu-6.0.8d59ffa07f615
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.4
1
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.4
1
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
wget@1.21.3-1+b2
no fix listed
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
wget@1.21.3-1+b2
no fix listed
1
ghcr.io/apache/flink-kubernetes-operator:c703255e9c2ce635b89
wget@1.21.2-2ubuntu1.1
1.21.2-2ubuntu1.4
1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
wget@1.25.0-2
no fix listed
1
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.4
1
ghcr.io/appscode/s3proxy:sha-a82ca6820518335f9f9
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.4
1
ghcr.io/astriaorg/account-monitor:latest4c8b42890035
wget@1.21.3-1+deb12u1
no fix listed
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
wget@1.21.3-1+b1
no fix listed
1
ghcr.io/astriaorg/auctioneer:pr-18391386b7b5e555
wget@1.21.3-1+b2
no fix listed
1
ghcr.io/astriaorg/conductor:1.1.01f97d131b1d1
wget@1.21.3-1+b2
no fix listed
1
ghcr.io/astriaorg/evm-bridge-withdrawer:1.0.29c88e1aff357
wget@1.21.3-1+b2
no fix listed
1
ghcr.io/astriaorg/hermes:0.5.04f33a0a9f75e
wget@1.21.4-1ubuntu4.1
1.21.4-1ubuntu4.4
1
ghcr.io/astriaorg/sequencer:latest44f82ee0b24c
wget@1.21.3-1+deb12u1
no fix listed
1
ghcr.io/astriaorg/sequencer-relayer:latest5f6c74993f08
wget@1.21.3-1+deb12u1
no fix listed
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1+esm3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.