StackRadar

CVE-2026-16599

Medium

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.1
base score, highest
EPSS
0.004
31st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
565
of 17,787 indexed, latest versions
Container images
560
deployed by those charts
Fix available
2 of 3
affected packages

Security update for wget

Carried by container images the latest versions of 565 of 17,787 indexed charts deploy, on 560 images.

Affected packageAffected versionsFixed inImages
wgetdeb1.15-1ubuntu1, 1.15-1ubuntu1.14.04.1, 1.15-1ubuntu1.14.04.4, 1.17.1-1ubuntu1.3+23 moreno fix listed555
wgetapk1.25.0-r4, 1.25.0-r161.25.0-r174
wgetrpm1.24.5-150700.3.6.11.24.5-150700.3.12.11
OSV records
CGA-7q69-m5x5-gcq7DEBIAN-CVE-2026-16599UBUNTU-CVE-2026-16599SUSE-SU-2026:4049-1
Also known as
CGA-j4gw-5vrq-m7mf

Charts affected

565 by stars
ChartLatestAffected imagesRadar Score
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
wget@1.21.3-1+b2
no fix listed

Open the chart page →

14,383
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
wget@1.21.2-2ubuntu1
no fix listed

Open the chart page →

9,396
browserlessvictorlane0.2.01 of 1See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
wget@1.21.4-1ubuntu4.1
no fix listed

Open the chart page →

4,360
aih-scannerwallarmVerified publisher2.7.111 of 2See more

aih-scanner wallarm 2.7.11

1 of the 2 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
wallarm/aih-scanner:2.7.11f1cb26db1f5b
wget@1.25.0-2
no fix listed

Open the chart page →

3,906
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
wget@1.20.3-1ubuntu2
no fix listed

Open the chart page →

11,167
myweatherhelmwebapp11.3.501 of 8See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
wget@1.20.3-1ubuntu2
no fix listed

Open the chart page →

9,225
myweatherhelm-schedulingwebapp11.3.921 of 9See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
wget@1.20.3-1ubuntu2
no fix listed

Open the chart page →

9,225
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
wget@1.20.3-1ubuntu1
no fix listed

Open the chart page →

14,420
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
wget@1.20.3-1ubuntu1
no fix listed

Open the chart page →

28,699
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
wget@1.21.3-1+deb12u1
no fix listed

Open the chart page →

8,824
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
wget@1.21.2-2ubuntu1
no fix listed

Open the chart page →

9,296
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
wget@1.21.2-2ubuntu1.1
no fix listed

Open the chart page →

14,172
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
wget@1.21.3-1+b2
no fix listed

Open the chart page →

13,197
clickhousezloi-space1.2.01 of 3See more

clickhouse zloi-space 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
yandex/clickhouse-server:21.3.204eccfffb01d7
wget@1.20.3-1ubuntu2
no fix listed

Open the chart page →

9,250
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
wget@1.21.2-2ubuntu1.4
no fix listed

Open the chart page →

7,916

Container images carrying it

560 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
wget@1.21.3-1+deb12u1
no fix listed
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
wget@1.21.3-1+deb12u1
no fix listed
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
wget@1.21.3-1+b2
no fix listed
1
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
wget@1.21.4-1ubuntu4.4
no fix listed
1
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
wget@1.21.4-1ubuntu4.4
no fix listed
1
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
wget@1.21.4-1ubuntu4.4
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
wget@1.21.4-1ubuntu4.1
no fix listed
1
ghcr.io/open-telemetry/demo:3.0.0-ade6c593fe75eb
wget@1.21.4-1ubuntu4.1
no fix listed
1
ghcr.io/openunison/openunison-k8s:1.0.51128081dae281
wget@1.21.4-1ubuntu4.5
no fix listed
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
wget@1.20.3-1ubuntu2
no fix listed
1
ghcr.io/radar-base/managementportal/management-portal:3.0.0c1b37e821f72
wget@1.25.0-2ubuntu4
no fix listed
1
ghcr.io/radar-base/radar-app-config/radar-app-config:0.6.24431db7b486b
wget@1.21.4-1ubuntu4.1
no fix listed
1
ghcr.io/radar-base/radar-data-dashboard-backend/radar-data-dashboard-backend:0.2.4d1e55350923c
wget@1.21.4-1ubuntu4.1
no fix listed
1
ghcr.io/radar-base/radar-gateway/radar-gateway:0.9.4219d894aa7a6
wget@1.21.4-1ubuntu4.1
no fix listed
1
ghcr.io/radar-base/radar-output-restructure/radar-output-restructure:3.0.67fb9c70e96a4
wget@1.21.4-1ubuntu4.1
no fix listed
1
ghcr.io/radar-base/radar-schemas/radar-schemas-tools:0.8.16c442e8bfe6b4
wget@1.21.4-1ubuntu4.1
no fix listed
1
ghcr.io/radar-base/radar-upload-source-connector/radar-upload-connect-backend:0.6.46a04b43b8d9a
wget@1.21.4-1ubuntu4.1
no fix listed
1
ghcr.io/runwhen-contrib/runwhen-local:0.12.0533ce58c6e02
wget@1.25.0-2
no fix listed
1
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
wget@1.21.3-1+deb12u1
no fix listed
1
ghcr.io/sdr-enthusiasts/docker-flightradar24:latest917e53402d51
wget@1.25.0-2
no fix listed
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
wget@1.21.3-1+b2
no fix listed
1
ghcr.io/slskd/slskd:0.25.1ab9ed50e028b
wget@1.21.4-1ubuntu4.1
no fix listed
1
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
wget@1.20.3-1ubuntu2
no fix listed
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
wget@1.20.3-1ubuntu2
no fix listed
1
ghcr.io/streamvisor/streamvisor:4.1.40bc598b2ac9a
wget@1.21.4-1ubuntu4.1
no fix listed
1
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
wget@1.21.3-1+deb12u1
no fix listed
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
wget@1.21.3-1+b2
no fix listed
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
wget@1.21.3-1+b2
no fix listed
1
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
wget@1.21.3-1+b2
no fix listed
1
ghcr.io/zazukoians/qlever-server:v0.10.0f10fd24b2290
wget@1.21.4-1ubuntu4.4
no fix listed
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
wget@1.21.3-1+b2
no fix listed
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
wget@1.21.3-1+b2
no fix listed
1
mcr.microsoft.com/mssql/server:2017-latest13221ac5f673
wget@1.19.4-1ubuntu2.2
no fix listed
1
mcr.microsoft.com/mssql/server:2019-CU16-ubuntu-20.0449a57dc220b1
wget@1.20.3-1ubuntu2
no fix listed
1
mcr.microsoft.com/mssql/server:latest4bab24f36c1e
wget@1.21.4-1ubuntu4.4
no fix listed
1
mcr.microsoft.com/mssql/server:2022-latestba4c8329f48f
wget@1.21.2-2ubuntu1.1
no fix listed
1
mcr.microsoft.com/mssql/server:2025-CU5-ubuntu-24.04cee0f4db03b5
wget@1.21.4-1ubuntu4.1
no fix listed
1
mcr.microsoft.com/mssql/server:2017-latestfbf79e0fea59
wget@1.19.4-1ubuntu2.2
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:1.66.9138c8b82c398
wget@1.21.4-1ubuntu4.5
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:latestf669a6eacf8c
wget@1.21.4-1ubuntu4.5
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:latest5d55a742a2bc
wget@1.25.0-2ubuntu4.4
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:latest8be3ed26f746
wget@1.25.0-2ubuntu4.4
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:1.72.6_local43316f900242
wget@1.25.0-2ubuntu4.3
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:1.74.4_local5bda14f66e8e
wget@1.25.0-2ubuntu4.4
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-security-testing-db-layer:1.74.4_local1ed844ecab29
wget@1.21.4-1ubuntu4.1
no fix listed
1
public.ecr.aws/aktosecurity/akto-api-testing:latest97d830d5538a
wget@1.21.4-1ubuntu4.5
no fix listed
1
public.ecr.aws/aktosecurity/akto-threat-detection:latest3f103ce347ce
wget@1.25.0-2ubuntu4.4
no fix listed
1
public.ecr.aws/aktosecurity/akto-threat-detection:1.16.2a47eb6cc17ea
wget@1.25.0-2ubuntu4.4
no fix listed
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
wget@1.21.3-1+b2
no fix listed
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
wget@1.21.3-1+b2
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.