StackRadar

CVE-2026-16599

Medium

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.1
base score, highest
EPSS
0.004
31st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
565
of 17,781 indexed, latest versions
Container images
561
deployed by those charts
Fix available
2 of 3
affected packages

Security update for wget

Carried by container images the latest versions of 565 of 17,781 indexed charts deploy, on 561 images.

Affected packageAffected versionsFixed inImages
wgetdeb1.15-1ubuntu1, 1.15-1ubuntu1.14.04.1, 1.15-1ubuntu1.14.04.4, 1.17.1-1ubuntu1.3+23 moreno fix listed556
wgetapk1.25.0-r4, 1.25.0-r161.25.0-r174
wgetrpm1.24.5-150700.3.6.11.24.5-150700.3.12.11
OSV records
CGA-7q69-m5x5-gcq7DEBIAN-CVE-2026-16599UBUNTU-CVE-2026-16599SUSE-SU-2026:4049-1
Also known as
CGA-j4gw-5vrq-m7mf

Charts affected

565 by stars
ChartLatestAffected imagesRadar Score
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
wget@1.21.3-1+b2
no fix listed

Open the chart page →

14,358
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
wget@1.21.2-2ubuntu1
no fix listed

Open the chart page →

9,347
browserlessvictorlane0.2.01 of 1See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
wget@1.21.4-1ubuntu4.1
no fix listed

Open the chart page →

4,305
aih-scannerwallarmVerified publisher2.7.111 of 2See more

aih-scanner wallarm 2.7.11

1 of the 2 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
wallarm/aih-scanner:2.7.11f1cb26db1f5b
wget@1.25.0-2
no fix listed

Open the chart page →

3,911
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
wget@1.20.3-1ubuntu2
no fix listed

Open the chart page →

11,119
myweatherhelmwebapp11.3.501 of 8See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
wget@1.20.3-1ubuntu2
no fix listed

Open the chart page →

9,130
myweatherhelm-schedulingwebapp11.3.921 of 9See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
wget@1.20.3-1ubuntu2
no fix listed

Open the chart page →

9,130
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
wget@1.20.3-1ubuntu1
no fix listed

Open the chart page →

14,364
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
wget@1.20.3-1ubuntu1
no fix listed

Open the chart page →

28,605
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
wget@1.21.3-1+deb12u1
no fix listed

Open the chart page →

9,117
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
wget@1.21.2-2ubuntu1
no fix listed

Open the chart page →

9,248
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
wget@1.21.2-2ubuntu1.1
no fix listed

Open the chart page →

14,100
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
wget@1.21.3-1+b2
no fix listed

Open the chart page →

13,677
clickhousezloi-space1.2.01 of 3See more

clickhouse zloi-space 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
yandex/clickhouse-server:21.3.204eccfffb01d7
wget@1.20.3-1ubuntu2
no fix listed

Open the chart page →

9,207
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
wget@1.21.2-2ubuntu1.4
no fix listed

Open the chart page →

7,849

Container images carrying it

561 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
atlassian/crowd:7.2.3c81cc7d6bc9e
wget@1.21.4-1ubuntu4.5
no fix listed
1
atlassian/crowd:5.2.2ebf761c7d437
wget@1.21.4-1ubuntu4.5
no fix listed
1
atlassian/jira-software:8.14.037bc46cbec1a
wget@1.21.2-2ubuntu1
no fix listed
1
atlassian/jira-software:9.7.264a75aa4ec4e
wget@1.21.4-1ubuntu4.1
no fix listed
1
atlassian/jira-software:11.3.11e5548cd4eea8
wget@1.21.4-1ubuntu4.5
no fix listed
1
avinash263/pyredis263:latestaa2b8727f1a6
wget@1.21.3-1+b2
no fix listed
1
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
wget@1.21.3-1+deb12u1
no fix listed
1
bicarus/elrond-rosetta:v1.3.50.0b1dab0721e1c
wget@1.20.3-1ubuntu2
no fix listed
1
blakeblackshear/frigate:0.10.0-amd64ae269270ad9e
wget@1.20.3-1ubuntu2
no fix listed
1
blockstream/bitcoind:27.29472492530e3
wget@1.21.3-1+b2
no fix listed
1
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
wget@1.21.3-1+b2
no fix listed
1
bnjbvr/kresus:0.22.137e216b182c8
wget@1.21.3-1+b2
no fix listed
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
wget@1.20.3-1ubuntu1
no fix listed
1
budibase/database:2.1.0d90f656261c9
wget@1.21.3-1+deb12u1
no fix listed
1
carlosmz87/test_helm_backend:latest8ffa63aa995d
wget@1.21.3-1+b2
no fix listed
1
castlemock/castlemock:latestb7f3f1527ba9
wget@1.21.4-1ubuntu4.1
no fix listed
1
cbioportal/cbioportal:6.4.1-web-shenandoah08debbd2dbf9
wget@1.21.4-1ubuntu4.1
no fix listed
1
chetangautamm/repo:sipp.v3e7f7049e1544
wget@1.20.3-1ubuntu1
no fix listed
1
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
wget@1.25.0-2
no fix listed
1
chriseaton/adventureworks:latest54c3384ce701
wget@1.21.2-2ubuntu1.1
no fix listed
1
circleci/runner:launch-agent9bdc62f02162
wget@1.20.3-1ubuntu2.1
no fix listed
1
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
wget@1.21.2-2ubuntu1.1
no fix listed
1
clickhouse/clickhouse-server:26.701b81d1432c4
wget@1.21.2-2ubuntu1.5
no fix listed
1
clickhouse/clickhouse-server:24.81ffa82edee00
wget@1.20.3-1ubuntu2.1
no fix listed
1
clickhouse/clickhouse-server:24.4.12e6587b81a26
wget@1.20.3-1ubuntu2
no fix listed
1
clickhouse/clickhouse-server:23.8512bb8a21483
wget@1.20.3-1ubuntu2.1
no fix listed
1
clickhouse/clickhouse-server:26.3810861a2e2d0
wget@1.21.2-2ubuntu1.5
no fix listed
1
clickhouse/clickhouse-server:25.3.2.398745843b17f9
wget@1.21.2-2ubuntu1.1
no fix listed
1
clickhouse/clickhouse-server:26.3.1092098d3b31dd
wget@1.21.2-2ubuntu1.1
no fix listed
1
clickhouse/clickhouse-server:24.12.6a65ca89ddbe8
wget@1.21.2-2ubuntu1.1
no fix listed
1
clickhouse/clickhouse-server:25.3.14.14b627d7a9bc0e
wget@1.21.2-2ubuntu1.1
no fix listed
1
clickhouse/clickhouse-server:23.4.2.11dc5658853ce1
wget@1.21.2-2ubuntu1
no fix listed
1
clickhouse/clickhouse-server:25.10.2.65e019438e1e05
wget@1.21.2-2ubuntu1.1
no fix listed
1
cloudve/ttyd:latestd79c1c5881c0
wget@1.19.4-1ubuntu2.2
no fix listed
1
countly/countly-server:25.05.4e3c238248f99
wget@1.20.3-1ubuntu2.1
no fix listed
1
cyfershepard/jellystat:1.1.11c4e2dfa8bddf
wget@1.21.3-1+deb12u1
no fix listed
1
daskdev/dask-notebook:1.1.0052630f5ca04
wget@1.19.4-1ubuntu2.1
no fix listed
1
dasmeta/mongodb-bi-connector:1.0.3fa657960dfec
wget@1.19.4-1ubuntu2.2
no fix listed
1
datamate/seafile-professional:11.0.202dd66b722464
wget@1.21.2-2ubuntu1.1
no fix listed
1
deepflowce/clickhouse-server:22.8.6.71bc1882f75c18
wget@1.20.3-1ubuntu2
no fix listed
1
dongjiang1989/lxcfs:v6.0.34bf9ae391948
wget@1.20.3-1ubuntu2.1
no fix listed
1
dragonflyoss/client:v0.1.82edf3e921f4e0
wget@1.21.3-1+b2
no fix listed
1
dremio/dremio-oss:24.1.080ed2e3b7c43
wget@1.21.2-2ubuntu1
no fix listed
1
drpcorg/dshackle:0.54.08858fae1859d
wget@1.21.2-2ubuntu1
no fix listed
1
drumsergio/genieacs:1.2.16.028244054e1bf
wget@1.21.3-1+deb12u1
no fix listed
1
dserio83/velero-watchdog:0.1.8d5deae589229
wget@1.21.3-1+deb12u1
no fix listed
1
dzikoysk/reposilite:3.5.264128c2d7a6ba
wget@1.21.4-1ubuntu4.1
no fix listed
1
dzikoysk/reposilite:3.6.390de4c8e6c0e
wget@1.21.4-1ubuntu4.5
no fix listed
1
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
wget@1.25.0-2
no fix listed
1
electriccoinco/lightwalletd:v0.5.42ae3a551e111
wget@1.25.0-2
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.