StackRadar

CVE-2026-16730

Medium

Advisory

Published 1 Sept 2026In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
1st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
35
of 17,781 indexed, latest versions
Container images
36
deployed by those charts
Fix available
1 of 1
affected package

Red Hat Security Advisory: dbus-broker security update

Carried by container images the latest versions of 35 of 17,781 indexed charts deploy, on 36 images.

Affected packageAffected versionsFixed inImages
dbus-brokerrpm28-7.el9, 28-8.el9, 36-4.el100:28-9.el9_8, 0:36-5.el10_236
OSV records
RHSA-2026:61340RHSA-2026:61355RLSA-2026:61340RLSA-2026:61355

Charts affected

35 by stars
ChartLatestAffected imagesRadar Score
volsyncbackube-helm-chartsVerified publisher0.16.01 of 1See more

volsync backube-helm-charts 0.16.0

1 of the 1 container images this version deploys carry CVE-2026-16730.

Container imageDigestPackageFixed in
quay.io/backube/volsync:0.16.00d03a6aad575
dbus-broker@28-7.el9
0:28-9.el9_8

Open the chart page →

1,346
rocketmqrocketmq12.6.01 of 2See more

rocketmq rocketmq 12.6.0

1 of the 2 container images this version deploys carry CVE-2026-16730.

Container imageDigestPackageFixed in
apacherocketmq/rocketmq-dashboard:2.1.0ce78506bd6fe
dbus-broker@28-7.el9
0:28-9.el9_8

Open the chart page →

6,328
truenas-csptruenas-cspVerified publisher1.2.41 of 11See more

truenas-csp truenas-csp 1.2.4

1 of the 11 container images this version deploys carry CVE-2026-16730.

Container imageDigestPackageFixed in
quay.io/hpestorage/csi-driver:v3.2.0ef7f4e1544fa
dbus-broker@28-7.el9
0:28-9.el9_8

Open the chart page →

5,759
pubsubplus-hasolaceVerified publisher3.10.01 of 1See more

pubsubplus-ha solace 3.10.0

1 of the 1 container images this version deploys carry CVE-2026-16730.

Container imageDigestPackageFixed in
solace/solace-pubsub-standard:latest8e8ad105595e
dbus-broker@28-7.el9
0:28-9.el9_8

Open the chart page →

236
codetogethercodetogether1.4.251 of 1See more

codetogether codetogether 1.4.25

1 of the 1 container images this version deploys carry CVE-2026-16730.

Container imageDigestPackageFixed in
codetogether/codetogether:latest4348c8a38752
dbus-broker@28-7.el9
0:28-9.el9_8

Open the chart page →

7,450
kiali-operatorkiali2.31.01 of 1See more

kiali-operator kiali 2.31.0

1 of the 1 container images this version deploys carry CVE-2026-16730.

Container imageDigestPackageFixed in
quay.io/kiali/kiali-operator:v2.31.0f837d8f25545
dbus-broker@28-7.el9
0:28-9.el9_8

Open the chart page →

1,157
rocketmq-clusterrocketmq12.6.01 of 2See more

rocketmq-cluster rocketmq 12.6.0

1 of the 2 container images this version deploys carry CVE-2026-16730.

Container imageDigestPackageFixed in
apacherocketmq/rocketmq-dashboard:2.1.0ce78506bd6fe
dbus-broker@28-7.el9
0:28-9.el9_8

Open the chart page →

6,328
hpe-greenlake-file-csi-driverhpe-storageVerified publisher2.6.41 of 7See more

hpe-greenlake-file-csi-driver hpe-storage 2.6.4

1 of the 7 container images this version deploys carry CVE-2026-16730.

Container imageDigestPackageFixed in
quay.io/hpestorage/filex-csi-driver:2.6.4b7f960bbf472
dbus-broker@28-7.el9
0:28-9.el9_8

Open the chart page →

6,095
kokukokuVerified publisher1.0.01 of 7See more

koku koku 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-16730.

Container imageDigestPackageFixed in
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
dbus-broker@28-7.el9
0:28-9.el9_8

Open the chart page →

12,019
pubsubplussolaceVerified publisher3.10.01 of 1See more

pubsubplus solace 3.10.0

1 of the 1 container images this version deploys carry CVE-2026-16730.

Container imageDigestPackageFixed in
solace/solace-pubsub-standard:latest8e8ad105595e
dbus-broker@28-7.el9
0:28-9.el9_8

Open the chart page →

236
pubsubplus-devsolaceVerified publisher3.10.01 of 1See more

pubsubplus-dev solace 3.10.0

1 of the 1 container images this version deploys carry CVE-2026-16730.

Container imageDigestPackageFixed in
solace/solace-pubsub-standard:latest8e8ad105595e
dbus-broker@28-7.el9
0:28-9.el9_8

Open the chart page →

236
apishiftapishiftVerified publisher0.3.01 of 4See more

apishift apishift 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-16730.

Container imageDigestPackageFixed in
quay.io/everythingascode/apishift:v0.3.08fbbcd23b902
dbus-broker@28-7.el9
0:28-9.el9_8

Open the chart page →

2,902
custom-rhcl-consolecustom-rhcl-consoleVerified publisher0.1.21 of 3See more

custom-rhcl-console custom-rhcl-console 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-16730.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/custom-rhcl-console:v0.1.270bb0cabd653
dbus-broker@28-7.el9
0:28-9.el9_8

Open the chart page →

1,885
dara-chartsdara-charts0.1.01 of 2See more

dara-charts dara-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-16730.

Container imageDigestPackageFixed in
razzy10/product-service:latest702e411956db
dbus-broker@28-7.el9
0:28-9.el9_8

Open the chart page →

3,547
dellhw_exporterdellhw-exporterVerified publisher1.0.11 of 1See more

dellhw_exporter dellhw-exporter 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-16730.

Container imageDigestPackageFixed in
quay.io/galexrt/dellhw_exporter:v2.0.0-rc.18a1361fa38c1
dbus-broker@28-7.el9
0:28-9.el9_8

Open the chart page →

3,191
prometheus-dellhw-exporterdellhw-exporterVerified publisher1.3.01 of 1See more

prometheus-dellhw-exporter dellhw-exporter 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-16730.

Container imageDigestPackageFixed in
quay.io/galexrt/dellhw_exporter:v2.0.0b3a5806d73b5
dbus-broker@28-7.el9
0:28-9.el9_8

Open the chart page →

1,812
drogue-cloud-coredrogue-iotVerified publisher0.7.111 of 22See more

drogue-cloud-core drogue-iot 0.7.11

1 of the 22 container images this version deploys carry CVE-2026-16730.

Container imageDigestPackageFixed in
ghcr.io/drogue-iot/console-frontend:0.11.0558972f9374c
dbus-broker@28-7.el9
0:28-9.el9_8

Open the chart page →

55,666
extended-ceph-exporterextended-ceph-exporterVerified publisher1.10.01 of 2See more

extended-ceph-exporter extended-ceph-exporter 1.10.0

1 of the 2 container images this version deploys carry CVE-2026-16730.

Container imageDigestPackageFixed in
quay.io/ceph/ceph:v21.1.05ff3692d2f3f
dbus-broker@36-4.el10
0:36-5.el10_2

Open the chart page →

2,885
hammerspace-csihscsi1.2.81 of 6See more

hammerspace-csi hscsi 1.2.8

1 of the 6 container images this version deploys carry CVE-2026-16730.

Container imageDigestPackageFixed in
hammerspaceinc/csi-plugin:v1.2.8-rc2395bee4504fc
dbus-broker@28-7.el9
0:28-9.el9_8

Open the chart page →

4,441
iframelyiframelyVerified publisher2.3.51 of 1See more

iframely iframely 2.3.5

1 of the 1 container images this version deploys carry CVE-2026-16730.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/helm-iframely/iframely:2.3.5fcf07d5ff7e2
dbus-broker@28-7.el9
0:28-9.el9_8

Open the chart page →

3,154
wjh-rechnerit-at-mOfficialVerified publisher1.0.41 of 1See more

wjh-rechner it-at-m 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-16730.

Container imageDigestPackageFixed in
ghcr.io/it-at-m/wjh-rechner:1.0.0bc70cdb5a01a
dbus-broker@28-7.el9
0:28-9.el9_8

Open the chart page →

3,460
secret-operatorkubedoopVerified publisher0.4.01 of 5See more

secret-operator kubedoop 0.4.0

1 of the 5 container images this version deploys carry CVE-2026-16730.

Container imageDigestPackageFixed in
quay.io/zncdatadev/secret-csi-driver:0.4.0604a7d98ab58
dbus-broker@28-7.el9
0:28-9.el9_8

Open the chart page →

4,341
llm-dllm-dVerified publisher1.0.231 of 2See more

llm-d llm-d 1.0.23

1 of the 2 container images this version deploys carry CVE-2026-16730.

Container imageDigestPackageFixed in
ghcr.io/llm-d/llm-d-model-service:v0.0.158b99a8104a2f
dbus-broker@28-7.el9
0:28-9.el9_8

Open the chart page →

2,507
neuralbank-stackneuralbank-stack0.1.01 of 4See more

neuralbank-stack neuralbank-stack 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-16730.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/neuralbank-frontend:latest5f4572ef6d6f
dbus-broker@28-7.el9
0:28-9.el9_8

Open the chart page →

5,191
neurofaceneurofaceVerified publisher1.4.22 of 3See more

neuroface neuroface 1.4.2

2 of the 3 container images this version deploys carry CVE-2026-16730.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/neuroface-backend:v1.4.13194d46df0f9
dbus-broker@28-7.el9
0:28-9.el9_8
quay.io/maximilianopizarro/neuroface-frontend:v1.4.1841b70cd1424
dbus-broker@28-7.el9
0:28-9.el9_8

Open the chart page →

7,310
sentinelopennms-helm-chartsVerified publisher0.4.01 of 2See more

sentinel opennms-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-16730.

Container imageDigestPackageFixed in
opennms/sentinel:36.0.288869082a14f
dbus-broker@36-4.el10
0:36-5.el10_2

Open the chart page →

2,024
chatbot-ai-sampleopenshift0.1.62 of 4See more

chatbot-ai-sample openshift 0.1.6

2 of the 4 container images this version deploys carry CVE-2026-16730.

Container imageDigestPackageFixed in
quay.io/ai-lab/llamacpp_python:latest70d138997acd
dbus-broker@28-7.el9
0:28-9.el9_8
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
dbus-broker@28-7.el9
0:28-9.el9_8

Open the chart page →

18,922
exporteropenshift1.0.472 of 3See more

exporter openshift 1.0.47

2 of the 3 container images this version deploys carry CVE-2026-16730.

Container imageDigestPackageFixed in
public.ecr.aws/perfectscale-io/psc-exporter:v1.0.45-redhat9083e60c38bc
dbus-broker@28-7.el9
0:28-9.el9_8
public.ecr.aws/perfectscale-io/ubi9/ubi:9.5d7c3def9252b
dbus-broker@28-7.el9
0:28-9.el9_8

Open the chart page →

13,000
kb-cloud-installeropenshift2.1.351 of 1See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2026-16730.

Container imageDigestPackageFixed in
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
dbus-broker@28-7.el9
0:28-9.el9_8

Open the chart page →

4,127
redhat-trusted-application-pipelineopenshift1.0.21 of 2See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-16730.

Container imageDigestPackageFixed in
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
dbus-broker@28-7.el9
0:28-9.el9_8

Open the chart page →

8,599
powerdnspuckpuck2.0.01 of 4See more

powerdns puckpuck 2.0.0

1 of the 4 container images this version deploys carry CVE-2026-16730.

Container imageDigestPackageFixed in
pschiffe/pdns-admin:0.4.137ebba8c2b8f
dbus-broker@28-8.el9
0:28-9.el9_8

Open the chart page →

4,616
kubecostradar-baseVerified publisher1.0.01 of 7See more

kubecost radar-base 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-16730.

Container imageDigestPackageFixed in
gcr.io/kubecost1/kubecost-modeling:v0.1.22a461dc5cb96a
dbus-broker@28-7.el9
0:28-9.el9_8

Open the chart page →

9,355
rancher-auto-registerrancher-auto-registerVerified publisher0.1.01 of 1See more

rancher-auto-register rancher-auto-register 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-16730.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/ci-tools/tools:main9b9d1ed86b6a
dbus-broker@36-4.el10
0:36-5.el10_2

Open the chart page →

1,837
rhbk-neurofacerhbk-neurofaceVerified publisher1.0.02 of 4See more

rhbk-neuroface rhbk-neuroface 1.0.0

2 of the 4 container images this version deploys carry CVE-2026-16730.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/neuroface-backend:latestcba71dc08c8a
dbus-broker@28-7.el9
0:28-9.el9_8
quay.io/maximilianopizarro/neuroface-frontend:latestdcf24040cc77
dbus-broker@28-7.el9
0:28-9.el9_8

Open the chart page →

3,781
velero-clientvelero-clientVerified publisher1.4.21 of 1See more

velero-client velero-client 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-16730.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/velero-client/velero-client:1.4.203015f863a3e
dbus-broker@36-4.el10
0:36-5.el10_2

Open the chart page →

513

Container images carrying it

36 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
solace/solace-pubsub-standard:latest8e8ad105595e
dbus-broker@28-7.el9
0:28-9.el9_8
3
apacherocketmq/rocketmq-dashboard:2.1.0ce78506bd6fe
dbus-broker@28-7.el9
0:28-9.el9_8
2
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
dbus-broker@28-7.el9
0:28-9.el9_8
1
codetogether/codetogether:latest4348c8a38752
dbus-broker@28-7.el9
0:28-9.el9_8
1
hammerspaceinc/csi-plugin:v1.2.8-rc2395bee4504fc
dbus-broker@28-7.el9
0:28-9.el9_8
1
opennms/sentinel:36.0.288869082a14f
dbus-broker@36-4.el10
0:36-5.el10_2
1
pschiffe/pdns-admin:0.4.137ebba8c2b8f
dbus-broker@28-8.el9
0:28-9.el9_8
1
razzy10/product-service:latest702e411956db
dbus-broker@28-7.el9
0:28-9.el9_8
1
gcr.io/kubecost1/kubecost-modeling:v0.1.22a461dc5cb96a
dbus-broker@28-7.el9
0:28-9.el9_8
1
ghcr.io/drogue-iot/console-frontend:0.11.0558972f9374c
dbus-broker@28-7.el9
0:28-9.el9_8
1
ghcr.io/it-at-m/wjh-rechner:1.0.0bc70cdb5a01a
dbus-broker@28-7.el9
0:28-9.el9_8
1
ghcr.io/llm-d/llm-d-model-service:v0.0.158b99a8104a2f
dbus-broker@28-7.el9
0:28-9.el9_8
1
public.ecr.aws/perfectscale-io/psc-exporter:v1.0.45-redhat9083e60c38bc
dbus-broker@28-7.el9
0:28-9.el9_8
1
public.ecr.aws/perfectscale-io/ubi9/ubi:9.5d7c3def9252b
dbus-broker@28-7.el9
0:28-9.el9_8
1
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
dbus-broker@28-7.el9
0:28-9.el9_8
1
quay.io/ai-lab/llamacpp_python:latest70d138997acd
dbus-broker@28-7.el9
0:28-9.el9_8
1
quay.io/backube/volsync:0.16.00d03a6aad575
dbus-broker@28-7.el9
0:28-9.el9_8
1
quay.io/ceph/ceph:v21.1.05ff3692d2f3f
dbus-broker@36-4.el10
0:36-5.el10_2
1
quay.io/everythingascode/apishift:v0.3.08fbbcd23b902
dbus-broker@28-7.el9
0:28-9.el9_8
1
quay.io/galexrt/dellhw_exporter:v2.0.0-rc.18a1361fa38c1
dbus-broker@28-7.el9
0:28-9.el9_8
1
quay.io/galexrt/dellhw_exporter:v2.0.0b3a5806d73b5
dbus-broker@28-7.el9
0:28-9.el9_8
1
quay.io/hpestorage/csi-driver:v3.2.0ef7f4e1544fa
dbus-broker@28-7.el9
0:28-9.el9_8
1
quay.io/hpestorage/filex-csi-driver:2.6.4b7f960bbf472
dbus-broker@28-7.el9
0:28-9.el9_8
1
quay.io/kiali/kiali-operator:v2.31.0f837d8f25545
dbus-broker@28-7.el9
0:28-9.el9_8
1
quay.io/maximilianopizarro/custom-rhcl-console:v0.1.270bb0cabd653
dbus-broker@28-7.el9
0:28-9.el9_8
1
quay.io/maximilianopizarro/neuralbank-frontend:latest5f4572ef6d6f
dbus-broker@28-7.el9
0:28-9.el9_8
1
quay.io/maximilianopizarro/neuroface-backend:v1.4.13194d46df0f9
dbus-broker@28-7.el9
0:28-9.el9_8
1
quay.io/maximilianopizarro/neuroface-backend:latestcba71dc08c8a
dbus-broker@28-7.el9
0:28-9.el9_8
1
quay.io/maximilianopizarro/neuroface-frontend:v1.4.1841b70cd1424
dbus-broker@28-7.el9
0:28-9.el9_8
1
quay.io/maximilianopizarro/neuroface-frontend:latestdcf24040cc77
dbus-broker@28-7.el9
0:28-9.el9_8
1
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
dbus-broker@28-7.el9
0:28-9.el9_8
1
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
dbus-broker@28-7.el9
0:28-9.el9_8
1
quay.io/zncdatadev/secret-csi-driver:0.4.0604a7d98ab58
dbus-broker@28-7.el9
0:28-9.el9_8
1
registry.gitlab.com/xrow-public/ci-tools/tools:main9b9d1ed86b6a
dbus-broker@36-4.el10
0:36-5.el10_2
1
registry.gitlab.com/xrow-public/helm-iframely/iframely:2.3.5fcf07d5ff7e2
dbus-broker@28-7.el9
0:28-9.el9_8
1
registry.gitlab.com/xrow-public/velero-client/velero-client:1.4.203015f863a3e
dbus-broker@36-4.el10
0:36-5.el10_2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.