CVE-2026-40467

High

Advisory

Published 13 Jul 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.002; 12th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 52; of 17,781 indexed, latest versions
Container images: 45; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 52 of 17,781 indexed charts deploy, on 45 images.

Affected package	Affected versions	Fixed in	Images
gawkdeb	1:4.0.1+dfsg-2.1ubuntu2, 1:4.1.4+dfsg-1build1, 1:5.0.1+dfsg-1, 1:5.0.1+dfsg-1ubuntu0.1+5 more	1:4.0.1+dfsg-2.1ubuntu2+esm2, 1:4.1.4+dfsg-1ubuntu0.1~esm2, 1:5.0.1+dfsg-1ubuntu0.1+esm1, 1:5.1.0-1ubuntu0.2+1 more	45

OSV records: DEBIAN-CVE-2026-40467 UBUNTU-CVE-2026-40467
Also known as: USN-8588-1

Charts affected

52 by stars

Chart

Latest

Affected images

Radar Score

myweatherhelm-schedulingwebapp1

1.3.92

1 of 9 See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2026-40467.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	gawk@1:5.0.1+dfsg-1	1:5.0.1+dfsg-1ubuntu0.1+esm1

Open the chart page →

9,130

wordpress-alpinewordpress-alpine

1.5.18

1 of 6 See more

wordpress-alpine wordpress-alpine 1.5.18

1 of the 6 container images this version deploys carry CVE-2026-40467.

Container image	Digest	Package	Fixed in
library/mariadb :12.3.2	628f228f0fd5	gawk@1:5.2.1-2build3	1:5.2.1-2ubuntu0.1

Open the chart page →

3,990

Container images carrying it

45 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
gisaia/arlas-permissions-server :28.0.0	e612fc722e02	gawk@1:5.2.1-2+b1	no fix listed	2
gisaia/arlas-persistence-server :28.0.0	f667e0ee79be	gawk@1:5.2.1-2+b1	no fix listed	2
gisaia/arlas-server :28.0.0	4e693e7b6f37	gawk@1:5.2.1-2+b1	no fix listed	2
library/mariadb :10.8.3	0abf60f81588	gawk@1:5.1.0-1build3	1:5.1.0-1ubuntu0.2	2
library/mariadb :10.10	334b315c10e5	gawk@1:5.1.0-1ubuntu0.1	1:5.1.0-1ubuntu0.2	2
library/mariadb :12.0.2 :12.0-noble	607835cd628b	gawk@1:5.2.1-2build3	1:5.2.1-2ubuntu0.1	2
library/mariadb :11.3.2	e101f9db3191	gawk@1:5.1.0-1ubuntu0.1	1:5.1.0-1ubuntu0.2	2
louislam/uptime-kuma :2.5.4	917318f9d7be	gawk@1:5.2.1-2	no fix listed	2
louislam/uptime-kuma :2.3.2	9aeb4e51d038	gawk@1:5.2.1-2	no fix listed	2
louislam/uptime-kuma :2.5.0	a8610b3b4c38	gawk@1:5.2.1-2	no fix listed	2
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	gawk@1:5.0.1+dfsg-1	1:5.0.1+dfsg-1ubuntu0.1+esm1	2
baserow/baserow :1.30.1	df0c42eb67e8	gawk@1:5.2.1-2	no fix listed	1
chriseaton/adventureworks :latest	54c3384ce701	gawk@1:5.1.0-1ubuntu0.1	1:5.1.0-1ubuntu0.2	1
elastic/apm-server :7.17.6	c7a1c63257d0	gawk@1:5.0.1+dfsg-1	1:5.0.1+dfsg-1ubuntu0.1+esm1	1
engrmth/bnkr :2.1.0	6d8464e6f0e8	gawk@1:5.0.1+dfsg-1	1:5.0.1+dfsg-1ubuntu0.1+esm1	1
jordan/icinga2 :latest	f75025fe8ea8	gawk@1:5.2.1-2	no fix listed	1
library/mariadb :10.7.3	07e06f2e7ae9	gawk@1:5.0.1+dfsg-1	1:5.0.1+dfsg-1ubuntu0.1+esm1	1
library/mariadb :10.11.2	1c33370a599c	gawk@1:5.1.0-1build3	1:5.1.0-1ubuntu0.2	1
library/mariadb :10.4	22edfe1c7834	gawk@1:5.0.1+dfsg-1ubuntu0.1	1:5.0.1+dfsg-1ubuntu0.1+esm1	1
library/mariadb :10.8.2-focal	490f01279be1	gawk@1:5.0.1+dfsg-1	1:5.0.1+dfsg-1ubuntu0.1+esm1	1
library/mariadb :12.0.2	5b6a1eac15b8	gawk@1:5.2.1-2build3	1:5.2.1-2ubuntu0.1	1
library/mariadb :12.3.2	628f228f0fd5	gawk@1:5.2.1-2build3	1:5.2.1-2ubuntu0.1	1
library/mariadb :10.6.21	8a16204dc96c	gawk@1:5.0.1+dfsg-1ubuntu0.1	1:5.0.1+dfsg-1ubuntu0.1+esm1	1
library/mariadb :10.7	9a48ac9f196f	gawk@1:5.0.1+dfsg-1	1:5.0.1+dfsg-1ubuntu0.1+esm1	1
library/mariadb :12.2.2	b1cb255a9939	gawk@1:5.2.1-2build3	1:5.2.1-2ubuntu0.1	1
library/mariadb :10.10.2	bfc25a68e113	gawk@1:5.1.0-1build3	1:5.1.0-1ubuntu0.2	1
library/mariadb :10.6.15	e22328f4d714	gawk@1:5.0.1+dfsg-1ubuntu0.1	1:5.0.1+dfsg-1ubuntu0.1+esm1	1
library/mariadb :10.9.4	fbb8456ebdb1	gawk@1:5.1.0-1build3	1:5.1.0-1ubuntu0.2	1
library/mariadb :11.7.2	fcc7fcd7114a	gawk@1:5.2.1-2build3	1:5.2.1-2ubuntu0.1	1
linuxserver/calibre :version-v5.21.0	a847b5b2d860	gawk@1:4.1.4+dfsg-1build1	1:4.1.4+dfsg-1ubuntu0.1~esm2	1
louislam/uptime-kuma :2.5.3	3e24e96c89ef	gawk@1:5.2.1-2	no fix listed	1
louislam/uptime-kuma :2.0.2	4c364ef96aad	gawk@1:5.2.1-2	no fix listed	1
louislam/uptime-kuma :2.4.0	91e963bfda56	gawk@1:5.2.1-2	no fix listed	1
reportportal/service-auto-analyzer :5.15.5	c449b93629a5	gawk@1:5.2.1-2+b1	no fix listed	1
resouer/redis-slave :v2	e2f198b49ba7	gawk@1:4.0.1+dfsg-2.1ubuntu2	1:4.0.1+dfsg-2.1ubuntu2+esm2	1
rotationalio/geoping :1.3.0	34bcb6fc3cb7	gawk@1:5.2.1-2+b1	no fix listed	1
rotationalio/rotational-api :1.3.0	f1a2d05d8fff	gawk@1:5.2.1-2+b1	no fix listed	1
rotationalio/vanity :1.2.0	d77350f69b45	gawk@1:5.2.1-2+b1	no fix listed	1
ghcr.io/sdr-enthusiasts/docker-flightradar24 :latest	917e53402d51	gawk@1:5.2.1-2+b1	no fix listed	1
mcr.microsoft.com/mssql/server :2017-latest	13221ac5f673	gawk@1:4.1.4+dfsg-1build1	1:4.1.4+dfsg-1ubuntu0.1~esm2	1
mcr.microsoft.com/mssql/server :2019-CU16-ubuntu-20.04	49a57dc220b1	gawk@1:5.0.1+dfsg-1	1:5.0.1+dfsg-1ubuntu0.1+esm1	1
mcr.microsoft.com/mssql/server :2022-latest	ba4c8329f48f	gawk@1:5.1.0-1ubuntu0.1	1:5.1.0-1ubuntu0.2	1
mcr.microsoft.com/mssql/server :2025-CU5-ubuntu-24.04	cee0f4db03b5	gawk@1:5.2.1-2build3	1:5.2.1-2ubuntu0.1	1
mcr.microsoft.com/mssql/server :2017-latest	fbf79e0fea59	gawk@1:4.1.4+dfsg-1build1	1:4.1.4+dfsg-1ubuntu0.1~esm2	1
quay.io/opstree/fluent-bit :5.0.3	391eef5a68ff	gawk@1:5.2.1-2+b1	no fix listed	1