StackRadar

CVE-2026-16599

Medium

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.1
base score, highest
EPSS
0.004
31st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
565
of 17,787 indexed, latest versions
Container images
560
deployed by those charts
Fix available
2 of 3
affected packages

Security update for wget

Carried by container images the latest versions of 565 of 17,787 indexed charts deploy, on 560 images.

Affected packageAffected versionsFixed inImages
wgetdeb1.15-1ubuntu1, 1.15-1ubuntu1.14.04.1, 1.15-1ubuntu1.14.04.4, 1.17.1-1ubuntu1.3+23 moreno fix listed555
wgetapk1.25.0-r4, 1.25.0-r161.25.0-r174
wgetrpm1.24.5-150700.3.6.11.24.5-150700.3.12.11
OSV records
CGA-7q69-m5x5-gcq7DEBIAN-CVE-2026-16599UBUNTU-CVE-2026-16599SUSE-SU-2026:4049-1
Also known as
CGA-j4gw-5vrq-m7mf

Charts affected

565 by stars
ChartLatestAffected imagesRadar Score
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
wget@1.21.3-1+b2
no fix listed

Open the chart page →

14,383
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
wget@1.21.2-2ubuntu1
no fix listed

Open the chart page →

9,396
browserlessvictorlane0.2.01 of 1See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
wget@1.21.4-1ubuntu4.1
no fix listed

Open the chart page →

4,360
aih-scannerwallarmVerified publisher2.7.111 of 2See more

aih-scanner wallarm 2.7.11

1 of the 2 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
wallarm/aih-scanner:2.7.11f1cb26db1f5b
wget@1.25.0-2
no fix listed

Open the chart page →

3,906
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
wget@1.20.3-1ubuntu2
no fix listed

Open the chart page →

11,167
myweatherhelmwebapp11.3.501 of 8See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
wget@1.20.3-1ubuntu2
no fix listed

Open the chart page →

9,225
myweatherhelm-schedulingwebapp11.3.921 of 9See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
wget@1.20.3-1ubuntu2
no fix listed

Open the chart page →

9,225
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
wget@1.20.3-1ubuntu1
no fix listed

Open the chart page →

14,420
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
wget@1.20.3-1ubuntu1
no fix listed

Open the chart page →

28,699
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
wget@1.21.3-1+deb12u1
no fix listed

Open the chart page →

8,824
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
wget@1.21.2-2ubuntu1
no fix listed

Open the chart page →

9,296
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
wget@1.21.2-2ubuntu1.1
no fix listed

Open the chart page →

14,172
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
wget@1.21.3-1+b2
no fix listed

Open the chart page →

13,197
clickhousezloi-space1.2.01 of 3See more

clickhouse zloi-space 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
yandex/clickhouse-server:21.3.204eccfffb01d7
wget@1.20.3-1ubuntu2
no fix listed

Open the chart page →

9,250
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-16599.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
wget@1.21.2-2ubuntu1.4
no fix listed

Open the chart page →

7,916

Container images carrying it

560 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
wget@1.17.1-1ubuntu1.3
no fix listed
1
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
wget@1.25.0-2
no fix listed
1
treskon/portrait:DEV-latest88e813f22347
wget@1.25.0-2ubuntu4.3
no fix listed
1
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
wget@1.21.3-1+b2
no fix listed
1
trinodb/trino:405ee80ab5eeab2
wget@1.21.2-2ubuntu1
no fix listed
1
trueosiris/vrising:latest9356f98ad561
wget@1.21.2-2ubuntu1.1
no fix listed
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
wget@1.21.3-1+deb12u1
no fix listed
1
vinanrra/7dtd-server:v0.4.4f9534490bd2b
wget@1.19.4-1ubuntu2.2
no fix listed
1
vlebediantsev/notes-admin-front:latest007c6670ff48
wget@1.21.3-1+b2
no fix listed
1
vlebediantsev/notes-project-front:latest945675fd2636
wget@1.21.3-1+b2
no fix listed
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
wget@1.21.3-1+b2
no fix listed
1
voltha/voltha-cli:1.6.0c4e41e92f046
wget@1.17.1-1ubuntu1.4
no fix listed
1
voltha/voltha-netconf:1.6.037f80524c207
wget@1.17.1-1ubuntu1.4
no fix listed
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
wget@1.17.1-1ubuntu1.4
no fix listed
1
voltha/voltha-tester:1.7.0655c3048a602
wget@1.17.1-1ubuntu1.5
no fix listed
1
wallarm/aih-scanner:2.7.11f1cb26db1f5b
wget@1.25.0-2
no fix listed
1
wger/server:2.6997ead43aabd
wget@1.21.4-1ubuntu4.1
no fix listed
1
wiktorn/overpass-api:latest9bb5f4a9b54c
wget@1.21.3-1+deb12u1
no fix listed
1
wistefan/mvf:lateste0887302b2d8
wget@1.21.2-2ubuntu1
no fix listed
1
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
wget@1.21.2-2ubuntu1.1
no fix listed
1
xeotek/kadeck:6.3.439a3b37a17c5
wget@1.21.2-2ubuntu1.1
no fix listed
1
xeotek/kadeck:4.2.94c6b04d9ce55
wget@1.20.3-1ubuntu2
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
wget@1.21.3-1+b2
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
wget@1.21.3-1+b2
no fix listed
1
yandex/clickhouse-server:latest1cbf75aabe1e
wget@1.20.3-1ubuntu2
no fix listed
1
yandex/clickhouse-server:21.3.204eccfffb01d7
wget@1.20.3-1ubuntu2
no fix listed
1
yandex/clickhouse-server:19.17ab1738a64b70
wget@1.19.4-1ubuntu2.2
no fix listed
1
yandex/clickhouse-server:19.14ccf9c2b5e3f2
wget@1.19.4-1ubuntu2.2
no fix listed
1
yandex/clickhouse-server:19.16d210dc69321e
wget@1.19.4-1ubuntu2.2
no fix listed
1
zabbix/zabbix-server-mysql:ubuntu-6.4-latest55d074b6b031
wget@1.21.4-1ubuntu4.1
no fix listed
1
zabbix/zabbix-server-pgsql:ubuntu-5.4.66c946b1f45cd
wget@1.20.3-1ubuntu1
no fix listed
1
zabbix/zabbix-server-pgsql:ubuntu-7.0.237e8c8e059533
wget@1.21.4-1ubuntu4.1
no fix listed
1
zabbix/zabbix-server-pgsql:ubuntu-6.0.8d59ffa07f615
wget@1.21.2-2ubuntu1
no fix listed
1
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
wget@1.21.2-2ubuntu1.4
no fix listed
1
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
wget@1.21.2-2ubuntu1
no fix listed
1
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
wget@1.21.3-1+b2
no fix listed
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
wget@1.21.3-1+b2
no fix listed
1
ghcr.io/apache/flink-kubernetes-operator:c703255e9c2ce635b89
wget@1.21.2-2ubuntu1.1
no fix listed
1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
wget@1.25.0-2
no fix listed
1
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
wget@1.21.2-2ubuntu1
no fix listed
1
ghcr.io/appscode/s3proxy:sha-a82ca6820518335f9f9
wget@1.21.2-2ubuntu1
no fix listed
1
ghcr.io/astriaorg/account-monitor:latest4c8b42890035
wget@1.21.3-1+deb12u1
no fix listed
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
wget@1.21.3-1+b1
no fix listed
1
ghcr.io/astriaorg/auctioneer:pr-18391386b7b5e555
wget@1.21.3-1+b2
no fix listed
1
ghcr.io/astriaorg/conductor:1.1.01f97d131b1d1
wget@1.21.3-1+b2
no fix listed
1
ghcr.io/astriaorg/evm-bridge-withdrawer:1.0.29c88e1aff357
wget@1.21.3-1+b2
no fix listed
1
ghcr.io/astriaorg/hermes:0.5.04f33a0a9f75e
wget@1.21.4-1ubuntu4.1
no fix listed
1
ghcr.io/astriaorg/sequencer:latest44f82ee0b24c
wget@1.21.3-1+deb12u1
no fix listed
1
ghcr.io/astriaorg/sequencer-relayer:latest5f6c74993f08
wget@1.21.3-1+deb12u1
no fix listed
1
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
wget@1.25.0-r4
1.25.0-r17
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.