StackRadar

CVE-2026-16599

Medium

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.1
base score, highest
EPSS
0.004
31st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
565
of 17,787 indexed, latest versions
Container images
560
deployed by those charts
Fix available
2 of 3
affected packages

Security update for wget

Carried by container images the latest versions of 565 of 17,787 indexed charts deploy, on 560 images.

Affected packageAffected versionsFixed inImages
wgetdeb1.15-1ubuntu1, 1.15-1ubuntu1.14.04.1, 1.15-1ubuntu1.14.04.4, 1.17.1-1ubuntu1.3+23 moreno fix listed555
wgetapk1.25.0-r4, 1.25.0-r161.25.0-r174
wgetrpm1.24.5-150700.3.6.11.24.5-150700.3.12.11
OSV records
CGA-7q69-m5x5-gcq7DEBIAN-CVE-2026-16599UBUNTU-CVE-2026-16599SUSE-SU-2026:4049-1
Also known as
CGA-j4gw-5vrq-m7mf

Charts affected

565 by stars
ChartLatestAffected imagesRadar Score
account-lookup-servicemojaloop13.0.01 of 4See more

account-lookup-service mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
wget@1.20.3-1ubuntu2
no fix listed

Open the chart page →

11,734
account-lookup-service-adminmojaloop13.0.01 of 4See more

account-lookup-service-admin mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
wget@1.20.3-1ubuntu2
no fix listed

Open the chart page →

11,734
admin-api-svcmojaloop12.0.01 of 4See more

admin-api-svc mojaloop 12.0.0

1 of the 4 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
wget@1.20.3-1ubuntu2
no fix listed

Open the chart page →

12,147
fspiop-transfer-api-svcmojaloop12.0.11 of 3See more

fspiop-transfer-api-svc mojaloop 12.0.1

1 of the 3 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
wget@1.20.3-1ubuntu2
no fix listed

Open the chart page →

11,518
mojaloopmojaloop14.0.01 of 6See more

mojaloop mojaloop 14.0.0

1 of the 6 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
wget@1.20.3-1ubuntu2
no fix listed

Open the chart page →

19,265
mollysocketmollysocket-wrenixVerified publisher0.1.141 of 2See more

mollysocket mollysocket-wrenix 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
ghcr.io/mollyim/mollysocket:1.7.1c675622546a4
wget@1.21.3-1+deb12u1
no fix listed

Open the chart page →

2,460
user-manager-mongodbmoreillonVerified publisher0.6.21 of 4See more

user-manager-mongodb moreillon 0.6.2

1 of the 4 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
wget@1.21.3-1+b2
no fix listed

Open the chart page →

23,263
user-manager-neo4jmoreillonVerified publisher0.9.71 of 6See more

user-manager-neo4j moreillon 0.9.7

1 of the 6 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
moreillon/user-manager:v5.0.2e1c9bfab5c16
wget@1.21.3-1+b2
no fix listed

Open the chart page →

30,195
crowdmoxVerified publisher2.4.31 of 3See more

crowd mox 2.4.3

1 of the 3 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
atlassian/crowd:5.2.2ebf761c7d437
wget@1.21.4-1ubuntu4.5
no fix listed

Open the chart page →

5,713
mum-discord-botmum-discord-botVerified publisher0.3.71 of 1See more

mum-discord-bot mum-discord-bot 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
wget@1.21.3-1+b2
no fix listed

Open the chart page →

13,711
clickhousemyaVerified publisher0.2403.11 of 1See more

clickhouse mya 0.2403.1

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:24.2ed9640bfff07
wget@1.20.3-1ubuntu2
no fix listed

Open the chart page →

3,597
cognativemyaVerified publisher0.2403.31 of 3See more

cognative mya 0.2403.3

1 of the 3 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:24.2ed9640bfff07
wget@1.20.3-1ubuntu2
no fix listed

Open the chart page →

7,348
myweatherhelmmyweather1.3.111 of 7See more

myweatherhelm myweather 1.3.11

1 of the 7 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
mcr.microsoft.com/mssql/server:2017-latestfbf79e0fea59
wget@1.19.4-1ubuntu2.2
no fix listed

Open the chart page →

17,411
smilencsaVerified publisher1.1.04 of 23See more

smile ncsa 1.1.0

4 of the 23 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
wget@1.21.3-1+b2
no fix listed
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
wget@1.21.3-1+b2
no fix listed
socialmediamacroscope/preprocessing:0.1.3ca863306314b
wget@1.21.3-1+b2
no fix listed
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
wget@1.21.3-1+b2
no fix listed

Open the chart page →

109,485
core-keeper-dedicatednerkho-helm-charts0.1.11 of 1See more

core-keeper-dedicated nerkho-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
escaping/core-keeper-dedicated:latest87fa79255962
wget@1.25.0-2
no fix listed

Open the chart page →

3,804
node-appnode-app-lili1.0.01 of 1See more

node-app node-app-lili 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
laly9999/node-app:1dd0e503913e1
wget@1.21.3-1+deb12u1
no fix listed

Open the chart page →

9,831
node-debug-dashboardnode-debug-dashboardVerified publisher0.3.21 of 1See more

node-debug-dashboard node-debug-dashboard 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
wget@1.21.3-1+deb12u1
no fix listed

Open the chart page →

6,861
notes-admin-front-helm-chartnotesprojectchart0.1.01 of 1See more

notes-admin-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
vlebediantsev/notes-admin-front:latest007c6670ff48
wget@1.21.3-1+b2
no fix listed

Open the chart page →

13,331
notes-project-fromt-helm-chartnotesprojectchart0.1.01 of 1See more

notes-project-fromt-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
vlebediantsev/notes-project-front:latest945675fd2636
wget@1.21.3-1+b2
no fix listed

Open the chart page →

13,405
registration-ms-front-helm-chartnotesprojectchart0.1.01 of 1See more

registration-ms-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
wget@1.21.3-1+b2
no fix listed

Open the chart page →

13,387
zookeeper-helm-chartnotesprojectchart0.1.01 of 1See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
wget@1.15-1ubuntu1
no fix listed

Open the chart page →

41,455
splashntppoolVerified publisher1.0.41 of 1See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
scrapinghub/splash:3.4.1a5f89bc84606
wget@1.19.4-1ubuntu2.2
no fix listed

Open the chart page →

27,667
olvid-botobeoneVerified publisher0.3.31 of 1See more

olvid-bot obeone 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
olvid/bot-daemon:2.0.1e0e6b165d879
wget@1.21.4-1ubuntu4.1
no fix listed

Open the chart page →

2,088
mockoidcoidcmockVerified publisher0.0.11 of 1See more

mockoidc oidcmock 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
marcoimme/oidcmock:latestb6035c0721a8
wget@1.25.0-2
no fix listed

Open the chart page →

2,310
ojp-serverojp0.1.51 of 1See more

ojp-server ojp 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
rrobetti/ojp:0.1.0-beta1141bd88232b
wget@1.21.4-1ubuntu4.1
no fix listed

Open the chart page →

2,626
automx2oleds-helm-chartsVerified publisher1.0.51 of 1See more

automx2 oleds-helm-charts 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
oled01/automx2:2025.1.105d3e398e675
wget@1.21.3-1+deb12u1
no fix listed

Open the chart page →

5,313
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
wget@1.21.2-2ubuntu1
no fix listed

Open the chart page →

9,059
cdn-remoteopencord0.2.41 of 3See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
wget@1.19.4-1ubuntu2.2
no fix listed

Open the chart page →

63,277
comacopencord1.0.01 of 9See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
omecproject/onos-progran:1.0.05715e5648aa0
wget@1.17.1-1ubuntu1.3
no fix listed

Open the chart page →

88,616
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
wget@1.17.1-1ubuntu1.3
no fix listed

Open the chart page →

38,889
ponsimv2opencord1.2.31 of 2See more

ponsimv2 opencord 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
voltha/voltha-tester:1.7.0655c3048a602
wget@1.17.1-1ubuntu1.5
no fix listed

Open the chart page →

12,631
sebaopencord1.0.03 of 17See more

seba opencord 1.0.0

3 of the 17 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
voltha/voltha-cli:1.6.0c4e41e92f046
wget@1.17.1-1ubuntu1.4
no fix listed
voltha/voltha-netconf:1.6.037f80524c207
wget@1.17.1-1ubuntu1.4
no fix listed
voltha/voltha-ofagent:1.6.09ee8c1f4428c
wget@1.17.1-1ubuntu1.4
no fix listed

Open the chart page →

93,965
opencost-parquet-exporteropencostVerified publisher0.3.11 of 1See more

opencost-parquet-exporter opencost 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
wget@1.21.3-1+b2
no fix listed

Open the chart page →

11,003
dokuopenlit0.1.41 of 3See more

doku openlit 0.1.4

1 of the 3 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:latestfa394da808cc
wget@1.21.2-2ubuntu1.5
no fix listed

Open the chart page →

1,735
openlitopenlit1.24.01 of 3See more

openlit openlit 1.24.0

1 of the 3 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:24.4.12e6587b81a26
wget@1.20.3-1ubuntu2
no fix listed

Open the chart page →

5,056
openpanelopenpanel0.9.01 of 6See more

openpanel openpanel 0.9.0

1 of the 6 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:25.10.2.65e019438e1e05
wget@1.21.2-2ubuntu1.1
no fix listed

Open the chart page →

3,462
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
openwhisk/ow-utils:1.0.0c80dba0de3aa
wget@1.19.4-1ubuntu2.2
no fix listed

Open the chart page →

36,230
issuegenopsmxVerified publisher1.0.21 of 1See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
opsmx11/issuegen:v2.1.05c50ca123d88
wget@1.15-1ubuntu1.14.04.4
no fix listed

Open the chart page →

26,367
grrosdfir-infrastructureVerified publisher1.0.31 of 5See more

grr osdfir-infrastructure 1.0.3

1 of the 5 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
wget@1.21.3-1+b2
no fix listed

Open the chart page →

10,965
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.04 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

4 of the 40 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
wget@1.21.3-1+b2
no fix listed
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
wget@1.21.4-1ubuntu4.4
no fix listed
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
wget@1.21.4-1ubuntu4.4
no fix listed
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
wget@1.21.4-1ubuntu4.4
no fix listed

Open the chart page →

72,154
radiusp2p-avs0.1.01 of 1See more

radius p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
theradius/loggia:0.463ba348546ec
wget@1.21.3-1+b2
no fix listed

Open the chart page →

11,095
ungatep2p-avs0.1.02 of 3See more

ungate p2p-avs 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
wget@1.21.3-1+b2
no fix listed
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
wget@1.21.3-1+b2
no fix listed

Open the chart page →

25,681
p4p40.1.01 of 7See more

p4 p4 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
wget@1.21.2-2ubuntu1
no fix listed

Open the chart page →

27,667
clickhousepetersandor14.3.21 of 1See more

clickhouse petersandor 14.3.2

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:25.3.2.398745843b17f9
wget@1.21.2-2ubuntu1.1
no fix listed

Open the chart page →

2,220
falcon-asgi-serverphanVerified publisher0.1.01 of 1See more

falcon-asgi-server phan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
phan2410/falcon-asgi-server:0.1.04a86d138832d
wget@1.21.3-1+deb12u1
no fix listed

Open the chart page →

8,215
phronetisphronetis0.1.272 of 2See more

phronetis phronetis 0.1.27

2 of the 2 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
knspar/phronetis:0.1.4609499d2dc91a
wget@1.21.4-1ubuntu4.1
no fix listed
knspar/phronetis-operator:0.1.60c4f0543ee58
wget@1.21.3-1+b2
no fix listed

Open the chart page →

15,077
seafilephybros-helm-charts4.0.11 of 1See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.97ac833196f60
wget@1.20.3-1ubuntu2
no fix listed

Open the chart page →

22,146
subgraph-oraclepinaxVerified publisher0.0.11 of 1See more

subgraph-oracle pinax 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
wget@1.21.3-1+b2
no fix listed

Open the chart page →

11,373
pingdom-operatorpingdom-operator0.0.201 of 1See more

pingdom-operator pingdom-operator 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
wget@1.21.3-1+b2
no fix listed

Open the chart page →

11,017
spring-boot-openshiftpiominVerified publisher0.3.111 of 1See more

spring-boot-openshift piomin 0.3.11

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
wget@1.21.2-2ubuntu1
no fix listed

Open the chart page →

7,616

Container images carrying it

560 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
wget@1.21.3-1+b2
no fix listed
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
wget@1.21.3-1+b2
no fix listed
1
quay.io/argoprojlabs/gitops-promoter:v0.38.19c8a510dc25e
wget@1.25.0-2
no fix listed
1
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
wget@1.21.2-2ubuntu1
no fix listed
1
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
wget@1.25.0-2
no fix listed
1
quay.io/go-skynet/local-ai:latestd78cd113b2bc
wget@1.21.4-1ubuntu4.4
no fix listed
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
wget@1.21.3-1+b2
no fix listed
1
registry.gitlab.com/dyff/workflows-aggregator:0.16.9b7984253b128
wget@1.25.0-2ubuntu4.4
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
wget@1.21.3-1+deb12u1
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
wget@1.21.3-1+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.