StackRadar

CVE-2026-43011

Critical

Advisory

Published 1 May 2026In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.006
47th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
156
of 17,805 indexed, latest versions
Container images
155
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 156 of 17,805 indexed charts deploy, on 155 images.

Affected packageAffected versionsFixed inImages
linuxdeb3.13.0-46.77, 3.13.0-126.175, 3.13.0-149.199, 3.13.0-170.220+90 more3.13.0-214.265, 4.4.0-283.317, 4.15.0-253.265, 5.4.0-233.253+3 more155
OSV records
UBUNTU-CVE-2026-43011
Also known as
USN-8490-1, USN-8492-1, USN-8493-1, USN-8501-1, USN-8529-1, USN-8548-2, USN-8615-1

Charts affected

156 by stars
ChartLatestAffected imagesRadar Score
tdarrvhdirkVerified publisher5.0.52 of 2See more

tdarr vhdirk 5.0.5

2 of the 2 container images this version deploys carry CVE-2026-43011.

Container imageDigestPackageFixed in
haveagitgat/tdarr_node:2.17.013ff0913202dd
linux@5.4.0-163.180
5.4.0-233.253
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
linux@5.4.0-110.124
5.4.0-233.253

Open the chart page →

159,089
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-43011.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
linux@5.15.0-100.110
5.15.0-185.195

Open the chart page →

77,129
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-43011.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
linux@5.15.0-134.145
5.15.0-185.195

Open the chart page →

69,328
kongwallarmVerified publisher4.6.31 of 7See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2026-43011.

Container imageDigestPackageFixed in
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
linux@5.4.0-144.161
5.4.0-233.253

Open the chart page →

74,809
emissary-ingresswener8.12.21 of 2See more

emissary-ingress wener 8.12.2

1 of the 2 container images this version deploys carry CVE-2026-43011.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
linux@4.15.0-112.113
4.15.0-253.265

Open the chart page →

77,221
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2026-43011.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
linux@4.15.0-112.113
4.15.0-253.265

Open the chart page →

77,221

Container images carrying it

155 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ibmcom/icp-swift-sample:latestb5d8c6714dbc
linux@4.4.0-124.148
4.4.0-283.317
1
ibmcom/microclimate-theia:lateste17bdccc5030
linux@4.4.0-104.127
4.4.0-283.317
1
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
linux@5.4.0-120.136
5.4.0-233.253
1
intel/multimodal-data-visualization-streaming:3.01a89327e499b
linux@5.4.0-122.138
5.4.0-233.253
1
ironmansoftware/universal:3.3.1-ubuntu-20.041943c73cce31
linux@5.4.0-125.141
5.4.0-233.253
1
istio/install-cni:1.10.32232f365aed6
linux@4.15.0-147.151
4.15.0-253.265
1
istio/node-agent-k8s:1.2.9268ab879ea51
linux@4.4.0-150.176
4.4.0-283.317
1
istio/operator:1.10.3655eefa11c84
linux@4.15.0-147.151
4.15.0-253.265
1
istio/pilot:1.10.0294ca55bd1cc
linux@4.15.0-143.147
4.15.0-253.265
1
istio/pilot:1.2.9c09319753454
linux@4.4.0-150.176
4.4.0-283.317
1
istio/pilot:1.10.3e7e110a421c2
linux@4.15.0-147.151
4.15.0-253.265
1
istio/proxyv2:1.2.90c78be035e98
linux@4.4.0-150.176
4.4.0-283.317
1
istio/proxyv2:1.9.687a9db561d2e
linux@4.15.0-144.148
4.15.0-253.265
1
istio/proxyv2:1.10.088c6c693e67a
linux@4.15.0-143.147
4.15.0-253.265
1
jakowenko/double-take:1.6.0b858bac9e32a
linux@5.4.0-89.100
5.4.0-233.253
1
josh5/unmanic:0.2.64d49c4816260
linux@5.15.0-100.110
5.15.0-185.195
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
linux@5.4.0-62.70
5.4.0-233.253
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
linux@5.4.0-89.100
5.4.0-233.253
1
jupyterhub/k8s-hub:0.9.1ec78bdae0fed
linux@4.15.0-96.97
4.15.0-253.265
1
kennethreitz/httpbin:latest599fe5e50731
linux@4.15.0-38.41
4.15.0-253.265
1
kong/httpbin:latesta6ac46531193
linux@5.15.0-130.140
5.15.0-185.195
1
kusionstack/kusion:v0.14.0126c8f0b0976
linux@5.15.0-130.140
5.15.0-185.195
1
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
linux@6.8.0-124.124
6.8.0-134.134
1
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
linux@6.8.0-88.89
6.8.0-134.134
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
linux@5.4.0-100.113
5.4.0-233.253
1
mbround18/valheim:3.1.070bd4da591cd
linux@5.15.0-133.144
5.15.0-185.195
1
mediagis/nominatim:5.3.27923a8e67197
linux@6.8.0-124.124
6.8.0-134.134
1
milvusdb/milvus:v2.2.13a3a55e1c1497
linux@5.4.0-131.147
5.4.0-233.253
1
mintproject/graphql-engine:305c0dbeba1878eafe348f21fc300fbfc017d9dc83aade2c1855
linux@5.4.0-117.132
5.4.0-233.253
1
mlikiowa/napcat-docker:latest1336a777f9a4
linux@5.15.0-124.134
5.15.0-185.195
1
mshanley80/httpbin2022:latest5b189a70c0fb
linux@5.4.0-135.152
5.4.0-233.253
1
muluder/prograncontrollermcord:0.1.843b597a93da7
linux@4.4.0-112.135
4.4.0-283.317
1
nethermind/nethermind:1.14.615517708c3b6
linux@5.15.0-53.59
5.15.0-185.195
1
omecproject/mme-exporter:paging-latestbcc5f19fd676
linux@4.15.0-88.88
4.15.0-253.265
1
omecproject/onos-progran:1.0.05715e5648aa0
linux@4.4.0-112.135
4.4.0-283.317
1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
linux@4.4.0-142.168
4.4.0-283.317
1
opendatacube/pipelines:wofs-1.225d810e8504b8
linux@4.15.0-46.49
4.15.0-253.265
1
opendatacube/restcube:latest91870111837c
linux@4.15.0-50.54
4.15.0-253.265
1
opendatacube/wms:latest1b90cdf68831
linux@4.15.0-50.54
4.15.0-253.265
1
openelevation/open-elevation:latest82fb21612e86
linux@5.4.0-80.90
5.4.0-233.253
1
openthread/otbr:latestf307f59f6432
linux@4.15.0-213.224
4.15.0-253.265
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
linux@4.15.0-122.124
4.15.0-253.265
1
photoprism/photoprism:251130db16ee6b1ba3
linux@6.17.0-7.7
6.17.0-40.40
1
photoprism/photoprism:240711-cefc6fd632ca74
linux@6.8.0-38.38
6.8.0-134.134
1
resouer/redis-slave:v2e2f198b49ba7
linux@3.13.0-46.77
3.13.0-214.265
1
rezachalak/bzen-mongo:1.0.034f694325191
linux@5.4.0-156.173
5.4.0-233.253
1
scrapinghub/splash:3.4.1a5f89bc84606
linux@4.15.0-74.84
4.15.0-253.265
1
seafileltd/seafile-mc:9.0.106693911bcc40
linux@5.4.0-135.152
5.4.0-233.253
1
seafileltd/seafile-mc:10.0.170628f29c663
linux@5.4.0-152.169
5.4.0-233.253
1
seafileltd/seafile-mc:9.0.97ac833196f60
linux@5.4.0-125.141
5.4.0-233.253
1

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.