StackRadar

CVE-2026-43618

High

Advisory

Published 20 May 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.1
base score, highest
EPSS
0.008
54th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
94
of 17,781 indexed, latest versions
Container images
72
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 94 of 17,781 indexed charts deploy, on 72 images.

Affected packageAffected versionsFixed inImages
rsyncdeb3.1.0-2ubuntu0.1, 3.1.0-2ubuntu0.4, 3.1.1-3ubuntu1.1, 3.1.1-3ubuntu1.2+22 more3.1.0-2ubuntu0.4+esm3, 3.1.1-3ubuntu1.3+esm5, 3.1.2-2.1ubuntu1.6+esm3, 3.1.3-8ubuntu0.9+esm1+5 more68
rsyncapk3.4.1-r1, 3.4.1-r2, 3.4.2-r03.4.3-r04
OSV records
UBUNTU-CVE-2026-43618ALPINE-CVE-2026-43618DEBIAN-CVE-2026-43618
Also known as
USN-8283-1, USN-8349-1, USN-8349-2, USN-8349-3

Charts affected

94 by stars
ChartLatestAffected imagesRadar Score
ibm-swift-sampleibm-charts1.1.21 of 1See more

ibm-swift-sample ibm-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
ibmcom/icp-swift-sample:latestb5d8c6714dbc
rsync@3.1.1-3ubuntu1.2
3.1.1-3ubuntu1.3+esm5

Open the chart page →

25,160
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
rsync@3.1.3-8ubuntu0.4
3.1.3-8ubuntu0.9+esm1

Open the chart page →

16,417
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
rsync@3.2.7-1+deb12u4
3.2.7-1+deb12u5

Open the chart page →

33,242
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
rsync@3.2.7-1+deb12u4
3.2.7-1+deb12u5

Open the chart page →

33,242
mariadbmmontesVerified publisher0.3.01 of 1See more

mariadb mmontes 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
library/mariadb:10.7.307e06f2e7ae9
rsync@3.1.3-8ubuntu0.3
3.1.3-8ubuntu0.9+esm1

Open the chart page →

10,065
zookeeper-helm-chartnotesprojectchart0.1.01 of 1See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
rsync@3.1.0-2ubuntu0.1
3.1.0-2ubuntu0.4+esm3

Open the chart page →

41,427
splashntppoolVerified publisher1.0.41 of 1See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
scrapinghub/splash:3.4.1a5f89bc84606
rsync@3.1.2-2.1ubuntu1
3.1.2-2.1ubuntu1.6+esm3

Open the chart page →

27,633
db-backupoleds-helm-chartsVerified publisher0.1.01 of 1See more

db-backup oleds-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
oled01/db-backup:0.1.06302fd2b5333
rsync@3.2.3-8ubuntu3.1
3.2.7-0ubuntu0.22.04.6

Open the chart page →

8,090
comacopencord1.0.01 of 9See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
omecproject/onos-progran:1.0.05715e5648aa0
rsync@3.1.1-3ubuntu1.2
3.1.1-3ubuntu1.3+esm5

Open the chart page →

88,546
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
rsync@3.1.1-3ubuntu1.2
3.1.1-3ubuntu1.3+esm5

Open the chart page →

38,865
open-vpnopenvpn0.0.11 of 1See more

open-vpn openvpn 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
rsync@3.1.2-2.1ubuntu1.1
3.1.2-2.1ubuntu1.6+esm3

Open the chart page →

15,592
grrosdfir-infrastructureVerified publisher1.0.31 of 5See more

grr osdfir-infrastructure 1.0.3

1 of the 5 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
library/mariadb:11.3.2e101f9db3191
rsync@3.2.7-0ubuntu0.22.04.2
3.2.7-0ubuntu0.22.04.6

Open the chart page →

10,896
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.01 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

1 of the 40 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
library/mariadb:11.3.2e101f9db3191
rsync@3.2.7-0ubuntu0.22.04.2
3.2.7-0ubuntu0.22.04.6

Open the chart page →

71,208
matomopetbattle11.0.11 of 2See more

matomo petbattle 11.0.1

1 of the 2 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
bitnamilegacy/matomo:5.3.2-debian-12-r13f02c000c54b1
rsync@3.2.7-1+deb12u2
3.2.7-1+deb12u5

Open the chart page →

11,061
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
apache/airflow:2.10.2-python3.9ce90bdc3d2af
rsync@3.2.7-1
3.2.7-1+deb12u5

Open the chart page →

21,211
catalog-serverradar-baseVerified publisher0.9.31 of 1See more

catalog-server radar-base 0.9.3

1 of the 1 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-schemas/radar-schemas-tools:0.8.16c442e8bfe6b4
rsync@3.2.7-1ubuntu1.2
3.2.7-1ubuntu1.4

Open the chart page →

2,418
airflowsb-helm-charts0.3.01 of 1See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
apache/airflow:2.8.1e5560ad0b86e
rsync@3.2.7-1
3.2.7-1+deb12u5

Open the chart page →

10,209
nextcloudsb-helm-charts0.4.01 of 2See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
library/nextcloud:31.0.10-apacheb7faa1653c39
rsync@3.4.1+ds1-5
3.4.1+ds1-5+deb13u3

Open the chart page →

9,755
seldon-core-loadtestingseldon0.2.01 of 1See more

seldon-core-loadtesting seldon 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
seldonio/locust-core:0.81d0da98a2d76
rsync@3.1.1-3ubuntu1.2
3.1.1-3ubuntu1.3+esm5

Open the chart page →

23,007
oi-slurm-cluster-chartslurm-cluster-chart0.25.11 of 4See more

oi-slurm-cluster-chart slurm-cluster-chart 0.25.1

1 of the 4 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
library/mariadb:10.10334b315c10e5
rsync@3.2.7-0ubuntu0.22.04.2
3.2.7-0ubuntu0.22.04.6

Open the chart page →

4,332
slurm-cluster-chartslurm-cluster-chart0.25.01 of 4See more

slurm-cluster-chart slurm-cluster-chart 0.25.0

1 of the 4 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
library/mariadb:10.10334b315c10e5
rsync@3.2.7-0ubuntu0.22.04.2
3.2.7-0ubuntu0.22.04.6

Open the chart page →

4,332
aafsmo-helm-chart6.0.01 of 14See more

aaf smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
rsync@3.1.1-3ubuntu1.2
3.1.1-3ubuntu1.3+esm5

Open the chart page →

25,769
aaismo-helm-chart6.0.01 of 14See more

aai smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
rsync@3.1.1-3ubuntu1.2
3.1.1-3ubuntu1.3+esm5

Open the chart page →

25,803
dgbuildersmo-helm-chart6.0.01 of 3See more

dgbuilder smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
rsync@3.1.1-3ubuntu1.2
3.1.1-3ubuntu1.3+esm5

Open the chart page →

28,470
dmaap-listenersmo-helm-chart6.0.01 of 3See more

dmaap-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
rsync@3.1.1-3ubuntu1.2
3.1.1-3ubuntu1.3+esm5

Open the chart page →

25,769
elasticsearchsmo-helm-chart6.0.01 of 5See more

elasticsearch smo-helm-chart 6.0.0

1 of the 5 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
rsync@3.1.1-3ubuntu1.2
3.1.1-3ubuntu1.3+esm5

Open the chart page →

24,776
logsmo-helm-chart6.0.01 of 6See more

log smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
rsync@3.1.1-3ubuntu1.2
3.1.1-3ubuntu1.3+esm5

Open the chart page →

29,220
mariadb-initsmo-helm-chart6.0.01 of 2See more

mariadb-init smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
rsync@3.1.1-3ubuntu1.2
3.1.1-3ubuntu1.3+esm5

Open the chart page →

24,776
msbsmo-helm-chart6.0.01 of 6See more

msb smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
rsync@3.1.1-3ubuntu1.2
3.1.1-3ubuntu1.3+esm5

Open the chart page →

27,477
pndasmo-helm-chart6.0.01 of 3See more

pnda smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
rsync@3.1.1-3ubuntu1.2
3.1.1-3ubuntu1.3+esm5

Open the chart page →

27,477
pombasmo-helm-chart6.0.01 of 17See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
rsync@3.1.1-3ubuntu1.2
3.1.1-3ubuntu1.3+esm5

Open the chart page →

29,220
portalsmo-helm-chart6.0.01 of 8See more

portal smo-helm-chart 6.0.0

1 of the 8 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
rsync@3.1.1-3ubuntu1.2
3.1.1-3ubuntu1.3+esm5

Open the chart page →

27,477
sdcsmo-helm-chart6.0.01 of 14See more

sdc smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
rsync@3.1.1-3ubuntu1.2
3.1.1-3ubuntu1.3+esm5

Open the chart page →

25,769
sdnc-ansible-serversmo-helm-chart6.0.01 of 3See more

sdnc-ansible-server smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
rsync@3.1.1-3ubuntu1.2
3.1.1-3ubuntu1.3+esm5

Open the chart page →

25,769
sdnc-portalsmo-helm-chart6.0.01 of 3See more

sdnc-portal smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
rsync@3.1.1-3ubuntu1.2
3.1.1-3ubuntu1.3+esm5

Open the chart page →

25,769
sdnc-promsmo-helm-chart6.0.01 of 2See more

sdnc-prom smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
rsync@3.1.1-3ubuntu1.2
3.1.1-3ubuntu1.3+esm5

Open the chart page →

24,776
sdnc-websmo-helm-chart6.0.01 of 3See more

sdnc-web smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
rsync@3.1.1-3ubuntu1.2
3.1.1-3ubuntu1.3+esm5

Open the chart page →

24,776
ueb-listenersmo-helm-chart6.0.01 of 3See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
rsync@3.1.1-3ubuntu1.2
3.1.1-3ubuntu1.3+esm5

Open the chart page →

25,769
nagvissvtech-public-helm-charts1.0.01 of 1See more

nagvis svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
rsync@3.2.7-1
3.2.7-1+deb12u5

Open the chart page →

9,102
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
rsync@3.1.3-8ubuntu0.7
3.1.3-8ubuntu0.9+esm1

Open the chart page →

18,756
vehicle-dashboardtest-vehi-dash0.1.01 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
dblaci/ubuntu-ssh-rsync:20231020eea697611af4
rsync@3.2.7-0ubuntu0.22.04.2
3.2.7-0ubuntu0.22.04.6

Open the chart page →

20,270
nextcloudth-chartsVerified publisher0.4.01 of 1See more

nextcloud th-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
library/nextcloud:31.0.6-apache588609d76b21
rsync@3.2.7-1+deb12u2
3.2.7-1+deb12u5

Open the chart page →

10,086
bugsinkvictorlane0.3.71 of 2See more

bugsink victorlane 0.3.7

1 of the 2 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
library/mariadb:12.0-noble607835cd628b
rsync@3.2.7-1ubuntu1.2
3.2.7-1ubuntu1.4

Open the chart page →

4,054
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-43618.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
rsync@3.2.7-0ubuntu0.22.04.2
3.2.7-0ubuntu0.22.04.6

Open the chart page →

13,459

Container images carrying it

72 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
oled01/db-backup:0.1.06302fd2b5333
rsync@3.2.3-8ubuntu3.1
3.2.7-0ubuntu0.22.04.6
1
omecproject/onos-progran:1.0.05715e5648aa0
rsync@3.1.1-3ubuntu1.2
3.1.1-3ubuntu1.3+esm5
1
photoprism/photoprism:251130db16ee6b1ba3
rsync@3.4.1+ds1-5ubuntu1
3.4.1+ds1-5ubuntu1.2
1
photoprism/photoprism:240711-cefc6fd632ca74
rsync@3.2.7-1ubuntu1
3.2.7-1ubuntu1.4
1
resouer/redis-slave:v2e2f198b49ba7
rsync@3.1.0-2ubuntu0.1
3.1.0-2ubuntu0.4+esm3
1
scrapinghub/splash:3.4.1a5f89bc84606
rsync@3.1.2-2.1ubuntu1
3.1.2-2.1ubuntu1.6+esm3
1
seldonio/locust-core:0.81d0da98a2d76
rsync@3.1.1-3ubuntu1.2
3.1.1-3ubuntu1.3+esm5
1
semaphoreui/semaphore:v2.18.3e9260bfa8255
rsync@3.4.2-r0
3.4.3-r0
1
stackstorm/st2actionrunner:3.888235ba70cad
rsync@3.1.3-8ubuntu0.7
3.1.3-8ubuntu0.9+esm1
1
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
rsync@3.2.7-1
3.2.7-1+deb12u5
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
rsync@3.1.3-8ubuntu0.7
3.1.3-8ubuntu0.9+esm1
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
rsync@3.1.1-3ubuntu1.2
3.1.1-3ubuntu1.3+esm5
1
twentycrm/twenty-postgres-spilo:latest2f78405a78be
rsync@3.2.7-0ubuntu0.22.04.2
3.2.7-0ubuntu0.22.04.6
1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
rsync@3.2.7-1
3.2.7-1+deb12u5
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
rsync@3.4.1+ds1-5
3.4.1+ds1-5+deb13u3
1
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
rsync@3.1.3-8ubuntu0.3
3.1.3-8ubuntu0.9+esm1
1
ghcr.io/kokuwaio/gcloud-mysql:v3.2.1963098135c550
rsync@3.4.1-r2
3.4.3-r0
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
rsync@3.1.3-8
3.1.3-8ubuntu0.9+esm1
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
rsync@3.1.3-8
3.1.3-8ubuntu0.9+esm1
1
ghcr.io/lloesche/valheim-server:latest20fde516ce31
rsync@3.4.1+ds1-5+deb13u1
3.4.1+ds1-5+deb13u3
1
ghcr.io/radar-base/radar-schemas/radar-schemas-tools:0.8.16c442e8bfe6b4
rsync@3.2.7-1ubuntu1.2
3.2.7-1ubuntu1.4
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
rsync@3.1.1-3ubuntu1.3
3.1.1-3ubuntu1.3+esm5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.