StackRadar

CVE-2026-16599

Medium

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.1
base score, highest
EPSS
0.004
31st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
565
of 17,781 indexed, latest versions
Container images
561
deployed by those charts
Fix available
2 of 3
affected packages

Security update for wget

Carried by container images the latest versions of 565 of 17,781 indexed charts deploy, on 561 images.

Affected packageAffected versionsFixed inImages
wgetdeb1.15-1ubuntu1, 1.15-1ubuntu1.14.04.1, 1.15-1ubuntu1.14.04.4, 1.17.1-1ubuntu1.3+23 moreno fix listed556
wgetapk1.25.0-r4, 1.25.0-r161.25.0-r174
wgetrpm1.24.5-150700.3.6.11.24.5-150700.3.12.11
OSV records
CGA-7q69-m5x5-gcq7DEBIAN-CVE-2026-16599UBUNTU-CVE-2026-16599SUSE-SU-2026:4049-1
Also known as
CGA-j4gw-5vrq-m7mf

Charts affected

565 by stars
ChartLatestAffected imagesRadar Score
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
wget@1.21.3-1+b2
no fix listed

Open the chart page →

14,358
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
wget@1.21.2-2ubuntu1
no fix listed

Open the chart page →

9,347
browserlessvictorlane0.2.01 of 1See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
wget@1.21.4-1ubuntu4.1
no fix listed

Open the chart page →

4,305
aih-scannerwallarmVerified publisher2.7.111 of 2See more

aih-scanner wallarm 2.7.11

1 of the 2 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
wallarm/aih-scanner:2.7.11f1cb26db1f5b
wget@1.25.0-2
no fix listed

Open the chart page →

3,911
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
wget@1.20.3-1ubuntu2
no fix listed

Open the chart page →

11,119
myweatherhelmwebapp11.3.501 of 8See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
wget@1.20.3-1ubuntu2
no fix listed

Open the chart page →

9,130
myweatherhelm-schedulingwebapp11.3.921 of 9See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
wget@1.20.3-1ubuntu2
no fix listed

Open the chart page →

9,130
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
wget@1.20.3-1ubuntu1
no fix listed

Open the chart page →

14,364
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
wget@1.20.3-1ubuntu1
no fix listed

Open the chart page →

28,605
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
wget@1.21.3-1+deb12u1
no fix listed

Open the chart page →

9,117
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
wget@1.21.2-2ubuntu1
no fix listed

Open the chart page →

9,248
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
wget@1.21.2-2ubuntu1.1
no fix listed

Open the chart page →

14,100
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
wget@1.21.3-1+b2
no fix listed

Open the chart page →

13,677
clickhousezloi-space1.2.01 of 3See more

clickhouse zloi-space 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
yandex/clickhouse-server:21.3.204eccfffb01d7
wget@1.20.3-1ubuntu2
no fix listed

Open the chart page →

9,207
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
wget@1.21.2-2ubuntu1.4
no fix listed

Open the chart page →

7,849

Container images carrying it

561 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
engrmth/bnkr:2.1.06d8464e6f0e8
wget@1.20.3-1ubuntu2
no fix listed
1
escaping/core-keeper-dedicated:latest87fa79255962
wget@1.25.0-2
no fix listed
1
falcosecurity/event-generator:latest932956d86c99
wget@1.21.3-1+deb12u1
no fix listed
1
felipecs8/app-db-connection-test:v129e06c9c6385
wget@1.21.3-1+b2
no fix listed
1
firefart/requesttracker:5.0.40d6249906d8c
wget@1.21.3-1+b2
no fix listed
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
wget@1.20.3-1ubuntu2.1
no fix listed
1
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
wget@1.21.3-1+deb12u1
no fix listed
1
flanksource/batch-runner:v1.0.44689687a7cf95
wget@1.21.4-1ubuntu4.1
no fix listed
1
flashcatcloud/categraf:latest42e6ab16472e
wget@1.21.4-1ubuntu4.1
no fix listed
1
flyway/flyway:9.1545b5d7cdc75a
wget@1.20.3-1ubuntu2
no fix listed
1
frankescobar/allure-docker-service:latestdc171ec796d5
wget@1.21.4-1ubuntu4.1
no fix listed
1
galaxy/galaxy-init:v18.010267bad550e6
wget@1.15-1ubuntu1.14.04.4
no fix listed
1
galaxy/galaxy-stable:v18.018e577a626dfd
wget@1.15-1ubuntu1.14.04.4
no fix listed
1
geonode/geoserver:2.28.4-latest81b1d431b7e9
wget@1.21.2-2ubuntu1.1
no fix listed
1
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
wget@1.20.3-1ubuntu2
no fix listed
1
gradiant/open5gs-dbctl:0.10.3332031245fce
wget@1.21.4-1ubuntu4.1
no fix listed
1
graylog/graylog:6.1.1019de1aff48c2
wget@1.21.2-2ubuntu1.1
no fix listed
1
graylog/graylog:7.1.9598bd41fefd5
wget@1.21.4-1ubuntu4.5
no fix listed
1
graylog/graylog:7.2.0-beta.2-1e8431d59b84d
wget@1.21.4-1ubuntu4.5
no fix listed
1
graylog/graylog-enterprise:7.1.88a1f641cd7aa
wget@1.21.4-1ubuntu4.4
no fix listed
1
guacamole/guacamole:1.5.50f62f6d17ab3
wget@1.21.2-2ubuntu1
no fix listed
1
haugene/transmission-openvpn:4.0059216cfae4b
wget@1.20.3-1ubuntu1
no fix listed
1
haveagitgat/tdarr:2.00.181256348872ce
wget@1.20.3-1ubuntu2
no fix listed
1
haveagitgat/tdarr_node:2.00.101e3f9328327d
wget@1.20.3-1ubuntu1
no fix listed
1
haveagitgat/tdarr_node:2.17.013ff0913202dd
wget@1.20.3-1ubuntu2
no fix listed
1
headwindmdm/hmdm:0.1.93550b4840840
wget@1.21.2-2ubuntu1.4
no fix listed
1
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
wget@1.21.3-1+b2
no fix listed
1
hivemq/hivemq-operator:4.7.10241d6a8e1963
wget@1.21.2-2ubuntu1
no fix listed
1
hivemq/hivemq-swarm:4.54.0f9746d5d70fa
wget@1.21.4-1ubuntu4.1
no fix listed
1
hmediade/printserver:latest481a552c8e1c
wget@1.21.2-2ubuntu1
no fix listed
1
hyperglance/init:wildfly467ad8491bc3
wget@1.21.2-2ubuntu1.1
no fix listed
1
hyperglance/init:postgres9fd5faf1fe80
wget@1.21.2-2ubuntu1.1
no fix listed
1
hyperglance/init:apacheb2f8c6d52623
wget@1.21.2-2ubuntu1.1
no fix listed
1
hyperglance/postgresql-v2:10.0.5eb4d383894b8
wget@1.21.2-2ubuntu1.5
no fix listed
1
hyperledger/fabric-couchdb:0.4.10c65891b6c237
wget@1.17.1-1ubuntu1.4
no fix listed
1
hyperledger/fabric-orderer:1.3.06ee1abcfd840
wget@1.17.1-1ubuntu1.4
no fix listed
1
hyperledger/fabric-peer:1.3.06756c7c48234
wget@1.17.1-1ubuntu1.4
no fix listed
1
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
wget@1.17.1-1ubuntu1.4
no fix listed
1
ibmcom/icp-swift-sample:latestb5d8c6714dbc
wget@1.17.1-1ubuntu1.4
no fix listed
1
ildarmukhametzyanov/priceapp:0.115d23720a3ee
wget@1.21.3-1+b2
no fix listed
1
improwised/proxysql:master-6b26e59-171765063828940522e8b7
wget@1.21.3-1+b2
no fix listed
1
inseefrlab/shelly:cloudshell31f04ca7436b
wget@1.21.2-2ubuntu1
no fix listed
1
instill/artifact-backend:b28766ac4a393e601ed
wget@1.25.0-2
no fix listed
1
instill/mgmt-backend:d0933d4ebe12f77a3f9
wget@1.25.0-2
no fix listed
1
instill/model-backend:611f0f2e980125e5ba5
wget@1.25.0-2
no fix listed
1
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
wget@1.20.3-1ubuntu2
no fix listed
1
intelowlproject/intelowl:v6.6.10b22e547ea6b
wget@1.21.3-1+b2
no fix listed
1
inventree/inventree:1.5.4a946ec09da3e
wget@1.25.0-2
no fix listed
1
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
wget@1.20.3-1ubuntu2
no fix listed
1
ispras/svacer:11-2-042aa9fa9f189
wget@1.21.2-2ubuntu1.1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.