StackRadar

CVE-2026-3012

High

Advisory

Published 26 May 2026In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
8.0
base score, highest
EPSS
0.003
18th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
8
of 17,781 indexed, latest versions
Container images
8
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 8 of 17,781 indexed charts deploy, on 8 images.

Affected packageAffected versionsFixed inImages
sambadeb2:2.6.2+samba4.17.12+dfsg-0+deb12u1, 2:2.8.0+samba4.19.5+dfsg-4ubuntu9, 2:2.11.0+samba4.22.3+dfsg-4ubuntu2.2, 2:2.11.0+samba4.22.8+dfsg-0+deb13u1+3 more2:4.17.12+dfsg-0+deb12u4, 2:4.19.5+dfsg-4ubuntu9.6, 2:4.22.3+dfsg-4ubuntu2.4, 2:4.22.8+dfsg-0+deb13u28
OSV records
UBUNTU-CVE-2026-3012DEBIAN-CVE-2026-3012
Also known as
USN-8306-1

Charts affected

8 by stars
ChartLatestAffected imagesRadar Score
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-3012.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
samba@2:4.17.12+dfsg-0+deb12u1
2:4.17.12+dfsg-0+deb12u4

Open the chart page →

11,458
music-assistant-serverlmatfyVerified publisher0.1.91 of 1See more

music-assistant-server lmatfy 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-3012.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
samba@2:4.17.12+dfsg-0+deb12u3
2:4.17.12+dfsg-0+deb12u4

Open the chart page →

7,201
photoprismmmontesVerified publisher0.14.01 of 1See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-3012.

Container imageDigestPackageFixed in
photoprism/photoprism:251130db16ee6b1ba3
samba@2:2.11.0+samba4.22.3+dfsg-4ubuntu2.2
2:4.22.3+dfsg-4ubuntu2.4

Open the chart page →

11,103
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2026-3012.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
samba@2:2.8.0+samba4.19.5+dfsg-4ubuntu9
2:4.19.5+dfsg-4ubuntu9.6

Open the chart page →

16,954
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2026-3012.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
samba@2:4.19.5+dfsg-4ubuntu9.3
2:4.19.5+dfsg-4ubuntu9.6

Open the chart page →

5,292
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2026-3012.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
samba@2:2.11.0+samba4.22.8+dfsg-0+deb13u1
2:4.22.8+dfsg-0+deb13u2

Open the chart page →

29,817
music-assistantkarljorgensen0.1.31 of 1See more

music-assistant karljorgensen 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-3012.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
samba@2:4.17.12+dfsg-0+deb12u3
2:4.17.12+dfsg-0+deb12u4

Open the chart page →

7,081
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-3012.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
samba@2:2.6.2+samba4.17.12+dfsg-0+deb12u1
2:4.17.12+dfsg-0+deb12u4

Open the chart page →

37,942

Container images carrying it

8 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
cybrarist/discount-bandit:v4.0.4e9e2447ac666
samba@2:2.11.0+samba4.22.8+dfsg-0+deb13u1
2:4.22.8+dfsg-0+deb13u2
1
flanksource/batch-runner:v1.0.44689687a7cf95
samba@2:4.19.5+dfsg-4ubuntu9.3
2:4.19.5+dfsg-4ubuntu9.6
1
photoprism/photoprism:251130db16ee6b1ba3
samba@2:2.11.0+samba4.22.3+dfsg-4ubuntu2.2
2:4.22.3+dfsg-4ubuntu2.4
1
photoprism/photoprism:240711-cefc6fd632ca74
samba@2:2.8.0+samba4.19.5+dfsg-4ubuntu9
2:4.19.5+dfsg-4ubuntu9.6
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
samba@2:2.6.2+samba4.17.12+dfsg-0+deb12u1
2:4.17.12+dfsg-0+deb12u4
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
samba@2:4.17.12+dfsg-0+deb12u1
2:4.17.12+dfsg-0+deb12u4
1
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
samba@2:4.17.12+dfsg-0+deb12u3
2:4.17.12+dfsg-0+deb12u4
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
samba@2:4.17.12+dfsg-0+deb12u3
2:4.17.12+dfsg-0+deb12u4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.