StackRadar

CVE-2026-16277

Medium

Advisory

Published 20 Jul 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.005
42nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
14
of 17,781 indexed, latest versions
Container images
14
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 14 of 17,781 indexed charts deploy, on 14 images.

Affected packageAffected versionsFixed inImages
rpcbinddeb0.2.3-0.2, 0.2.3-0.6ubuntu0.18.04.1, 1.2.5-8, 1.2.6-2build1+3 moreno fix listed14
OSV records
DEBIAN-CVE-2026-16277UBUNTU-CVE-2026-16277

Charts affected

14 by stars
ChartLatestAffected imagesRadar Score
csi-driver-nfscsi-driver-nfsVerified publisher4.13.41 of 6See more

csi-driver-nfs csi-driver-nfs 4.13.4

1 of the 6 container images this version deploys carry CVE-2026-16277.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
rpcbind@1.2.6-6+b1
no fix listed

Open the chart page →

3,324
music-assistantbdclark-helm-chartsVerified publisher0.4.131 of 1See more

music-assistant bdclark-helm-charts 0.4.13

1 of the 1 container images this version deploys carry CVE-2026-16277.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.10.3885872224fa5
rpcbind@1.2.7-1
no fix listed

Open the chart page →

3,657
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-16277.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
rpcbind@1.2.6-6+b1
no fix listed

Open the chart page →

11,458
music-assistant-serverandibraeuVerified publisher2.1.21 of 1See more

music-assistant-server andibraeu 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-16277.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
rpcbind@1.2.6-6+b1
no fix listed

Open the chart page →

5,817
csi-driver-nfsbook-k8sinfra-v24.12.11 of 6See more

csi-driver-nfs book-k8sinfra-v2 4.12.1

1 of the 6 container images this version deploys carry CVE-2026-16277.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
rpcbind@1.2.6-6+b1
no fix listed

Open the chart page →

6,220
icinga2geek-cookbookVerified publisher4.2.01 of 1See more

icinga2 geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-16277.

Container imageDigestPackageFixed in
jordan/icinga2:latestf75025fe8ea8
rpcbind@1.2.6-6+b1
no fix listed

Open the chart page →

9,077
minecrafthelmforgeVerified publisher1.5.31 of 1See more

minecraft helmforge 1.5.3

1 of the 1 container images this version deploys carry CVE-2026-16277.

Container imageDigestPackageFixed in
itzg/minecraft-server:2026.9.04e29d14082d9
rpcbind@1.2.6-7ubuntu2
no fix listed

Open the chart page →

4,639
music-assistantkarljorgensen0.1.31 of 1See more

music-assistant karljorgensen 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-16277.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
rpcbind@1.2.6-6+b1
no fix listed

Open the chart page →

7,081
longhornkvalitetsitVerified publisher1.1.1-01 of 2See more

longhorn kvalitetsit 1.1.1-0

1 of the 2 container images this version deploys carry CVE-2026-16277.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.1.1ede61fe2a472
rpcbind@0.2.3-0.6ubuntu0.18.04.1
no fix listed

Open the chart page →

16,520
localpathprovisionermesosphere-stable0.1.21 of 1See more

localpathprovisioner mesosphere-stable 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-16277.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.5e66f32d19eb9
rpcbind@0.2.3-0.2
no fix listed

Open the chart page →

17,942
minecraftpaul1365972-mc3.0.11 of 1See more

minecraft paul1365972-mc 3.0.1

1 of the 1 container images this version deploys carry CVE-2026-16277.

Container imageDigestPackageFixed in
itzg/minecraft-server:latest8672e335dbef
rpcbind@1.2.6-7ubuntu2
no fix listed

Open the chart page →

4,253
game-serverpvillaverdeVerified publisher1.0.51 of 1See more

game-server pvillaverde 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-16277.

Container imageDigestPackageFixed in
ghcr.io/itzg/minecraft-server:latestc1a267d9ed6d
rpcbind@1.2.6-7ubuntu2
no fix listed

Open the chart page →

4,253
checkmkrtomik-helm-chartsVerified publisher0.1.01 of 1See more

checkmk rtomik-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-16277.

Container imageDigestPackageFixed in
checkmk/check-mk-community:2.5.0p6c11b422210c4
rpcbind@1.2.6-2build1
no fix listed

Open the chart page →

7,436
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-16277.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
rpcbind@1.2.5-8
no fix listed

Open the chart page →

15,230

Container images carrying it

14 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
checkmk/check-mk-community:2.5.0p6c11b422210c4
rpcbind@1.2.6-2build1
no fix listed
1
itzg/minecraft-server:2026.9.04e29d14082d9
rpcbind@1.2.6-7ubuntu2
no fix listed
1
itzg/minecraft-server:latest8672e335dbef
rpcbind@1.2.6-7ubuntu2
no fix listed
1
jordan/icinga2:latestf75025fe8ea8
rpcbind@1.2.6-6+b1
no fix listed
1
longhornio/longhorn-manager:v1.2.3dca34321452c
rpcbind@1.2.5-8
no fix listed
1
longhornio/longhorn-manager:v1.1.1ede61fe2a472
rpcbind@0.2.3-0.6ubuntu0.18.04.1
no fix listed
1
rancher/local-path-provisioner:v0.0.5e66f32d19eb9
rpcbind@0.2.3-0.2
no fix listed
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
rpcbind@1.2.6-6+b1
no fix listed
1
ghcr.io/itzg/minecraft-server:latestc1a267d9ed6d
rpcbind@1.2.6-7ubuntu2
no fix listed
1
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
rpcbind@1.2.6-6+b1
no fix listed
1
ghcr.io/music-assistant/server:2.10.3885872224fa5
rpcbind@1.2.7-1
no fix listed
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
rpcbind@1.2.6-6+b1
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
rpcbind@1.2.6-6+b1
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
rpcbind@1.2.6-6+b1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.