StackRadar

CVE-2026-41409

Critical

Advisory

Published 27 Apr 2026In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.004
37th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
23
of 17,781 indexed, latest versions
Container images
19
deployed by those charts
Fix available
1 of 1
affected package

Apache MINA Vulnerable to Deserialization of Untrusted Data (CVE-2024-52046 Incomplete Fix)

Carried by container images the latest versions of 23 of 17,781 indexed charts deploy, on 19 images.

Affected packageAffected versionsFixed inImages
mina-coremaven2.0.7, 2.0.9, 2.0.16, 2.0.19+5 more2.0.28, 2.1.11, 2.2.619
OSV records
GHSA-f2wh-grmh-r6jm

Charts affected

23 by stars
ChartLatestAffected imagesRadar Score
guacamoleberyju-org1.4.21 of 3See more

guacamole beryju-org 1.4.2

1 of the 3 container images this version deploys carry CVE-2026-41409.

Container imageDigestPackageFixed in
guacamole/guacamole:1.6.0f344085e618b
mina-core@2.2.4
2.2.6

Open the chart page →

3,606
guacamoledmunozv04Verified publisher0.3.41 of 2See more

guacamole dmunozv04 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-41409.

Container imageDigestPackageFixed in
guacamole/guacamole:1.6.0f344085e618b
mina-core@2.2.4
2.2.6

Open the chart page →

3,606
guacamolehalkeye0.2.11 of 3See more

guacamole halkeye 0.2.1

1 of the 3 container images this version deploys carry CVE-2026-41409.

Container imageDigestPackageFixed in
guacamole/guacamole:1.1.0333a7f40c145
mina-core@2.1.3
2.1.11

Open the chart page →

4,839
guacamolehelmforgeVerified publisher1.5.21 of 5See more

guacamole helmforge 1.5.2

1 of the 5 container images this version deploys carry CVE-2026-41409.

Container imageDigestPackageFixed in
guacamole/guacamole:1.6.0f344085e618b
mina-core@2.2.4
2.2.6

Open the chart page →

8,716
graylogt3n1.0.01 of 3See more

graylog t3n 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-41409.

Container imageDigestPackageFixed in
graylog2/server:2.4.3-38ff28c66e6c1
mina-core@2.0.16
2.0.28

Open the chart page →

8,063
kafka-devwikimedia0.2.01 of 1See more

kafka-dev wikimedia 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-41409.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
mina-core@2.0.7
2.0.28

Open the chart page →

41,427
clusterfactoryclusterfactory0.2.01 of 5See more

clusterfactory clusterfactory 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-41409.

Container imageDigestPackageFixed in
jenkins/jenkins:2.541.3-jdk21c4098086090c
mina-core@2.2.4
2.2.6

Open the chart page →

7,168
gitea-jenkinsclusterfactory0.1.11 of 5See more

gitea-jenkins clusterfactory 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-41409.

Container imageDigestPackageFixed in
jenkins/jenkins:2.541.3-jdk21c4098086090c
mina-core@2.2.4
2.2.6

Open the chart page →

5,238
ldapd4nVerified publisher0.1.01 of 1See more

ldap d4n 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-41409.

Container imageDigestPackageFixed in
dwimberger/ldap-ad-it:latest0c636e55eb82
mina-core@2.0.9
2.0.28

Open the chart page →

1,657
gerrit-operatorepmdedpVerified publisher2.25.01 of 2See more

gerrit-operator epmdedp 2.25.0

1 of the 2 container images this version deploys carry CVE-2026-41409.

Container imageDigestPackageFixed in
epamedp/edp-gerrit:3.14.249e8fe9c4855
mina-core@2.2.4
2.2.6

Open the chart page →

1,159
guacamolegabibbo970.3.01 of 3See more

guacamole gabibbo97 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-41409.

Container imageDigestPackageFixed in
guacamole/guacamole:1.3.0739cb6820ae8
mina-core@2.1.3
2.1.11

Open the chart page →

6,412
teedygeek-cookbookVerified publisher6.2.01 of 1See more

teedy geek-cookbook 6.2.0

1 of the 1 container images this version deploys carry CVE-2026-41409.

Container imageDigestPackageFixed in
sismics/docs:v1.10f4b0ef019cf1
mina-core@2.1.3
2.1.11

Open the chart page →

26,944
video-analytics-demogpu-operator0.1.91 of 3See more

video-analytics-demo gpu-operator 0.1.9

1 of the 3 container images this version deploys carry CVE-2026-41409.

Container imageDigestPackageFixed in
anguda/ant-media:2.5c435285fc241
mina-core@2.0.21
2.0.28

Open the chart page →

15,722
ma1sdnetsocVerified publisher0.2.11 of 1See more

ma1sd netsoc 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-41409.

Container imageDigestPackageFixed in
ma1uta/ma1sd:2.5.0ee2a56d8b8ca
mina-core@2.0.21
2.0.28

Open the chart page →

3,582
zookeeper-helm-chartnotesprojectchart0.1.01 of 1See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-41409.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
mina-core@2.0.7
2.0.28

Open the chart page →

41,427
cdn-remoteopencord0.2.41 of 3See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2026-41409.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
mina-core@2.0.16
2.0.28

Open the chart page →

63,223
comacopencord1.0.01 of 9See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2026-41409.

Container imageDigestPackageFixed in
omecproject/onos-progran:1.0.05715e5648aa0
mina-core@2.0.7
2.0.28

Open the chart page →

88,546
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2026-41409.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
mina-core@2.0.7
2.0.28

Open the chart page →

38,865
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2026-41409.

Container imageDigestPackageFixed in
library/zookeeper:3.43882d9493d38
mina-core@2.0.7
2.0.28

Open the chart page →

36,215
apache-knox-helmpfisterer-knox0.1.111 of 1See more

apache-knox-helm pfisterer-knox 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-41409.

Container imageDigestPackageFixed in
farberg/apache-knox-docker:1.6.14b4a22487394
mina-core@2.0.21
2.0.28

Open the chart page →

6,237
radar-cp-ksql-serverradar-baseVerified publisher0.0.21 of 2See more

radar-cp-ksql-server radar-base 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-41409.

Container imageDigestPackageFixed in
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
mina-core@2.2.2
2.2.6

Open the chart page →

5,269
guacamolesergiotocaliniVerified publisher1.0.01 of 2See more

guacamole sergiotocalini 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-41409.

Container imageDigestPackageFixed in
guacamole/guacamole:1.5.50f62f6d17ab3
mina-core@2.2.3
2.2.6

Open the chart page →

5,456
is-pattern-1wso2is-pattern15.11.01 of 2See more

is-pattern-1 wso2is-pattern1 5.11.0

1 of the 2 container images this version deploys carry CVE-2026-41409.

Container imageDigestPackageFixed in
massimolauri/wso2is:5.11.0-centose08abf0ce767
mina-core@2.0.19
2.0.28

Open the chart page →

6,213

Container images carrying it

19 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
guacamole/guacamole:1.6.0f344085e618b
mina-core@2.2.4
2.2.6
3
jenkins/jenkins:2.541.3-jdk21c4098086090c
mina-core@2.2.4
2.2.6
2
wurstmeister/zookeeper:latest7a7fd44a7210
mina-core@2.0.7
2.0.28
2
anguda/ant-media:2.5c435285fc241
mina-core@2.0.21
2.0.28
1
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
mina-core@2.2.2
2.2.6
1
dwimberger/ldap-ad-it:latest0c636e55eb82
mina-core@2.0.9
2.0.28
1
epamedp/edp-gerrit:3.14.249e8fe9c4855
mina-core@2.2.4
2.2.6
1
farberg/apache-knox-docker:1.6.14b4a22487394
mina-core@2.0.21
2.0.28
1
graylog2/server:2.4.3-38ff28c66e6c1
mina-core@2.0.16
2.0.28
1
guacamole/guacamole:1.5.50f62f6d17ab3
mina-core@2.2.3
2.2.6
1
guacamole/guacamole:1.1.0333a7f40c145
mina-core@2.1.3
2.1.11
1
guacamole/guacamole:1.3.0739cb6820ae8
mina-core@2.1.3
2.1.11
1
library/zookeeper:3.43882d9493d38
mina-core@2.0.7
2.0.28
1
ma1uta/ma1sd:2.5.0ee2a56d8b8ca
mina-core@2.0.21
2.0.28
1
massimolauri/wso2is:5.11.0-centose08abf0ce767
mina-core@2.0.19
2.0.28
1
muluder/prograncontrollermcord:0.1.843b597a93da7
mina-core@2.0.7
2.0.28
1
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
mina-core@2.0.16
2.0.28
1
omecproject/onos-progran:1.0.05715e5648aa0
mina-core@2.0.7
2.0.28
1
sismics/docs:v1.10f4b0ef019cf1
mina-core@2.1.3
2.1.11
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.