StackRadar

CVE-2026-4480

Critical

Advisory

Published 26 May 2026In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.0
base score, highest
EPSS
0.139
96th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
19
of 17,781 indexed, latest versions
Container images
16
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 19 of 17,781 indexed charts deploy, on 16 images.

Affected packageAffected versionsFixed inImages
sambadeb2:2.6.2+samba4.17.12+dfsg-0+deb12u1, 2:2.8.0+samba4.19.5+dfsg-4ubuntu9, 2:2.11.0+samba4.22.3+dfsg-4ubuntu2.2, 2:2.11.0+samba4.22.8+dfsg-0+deb13u1+10 more2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2, 2:4.15.13+dfsg-0ubuntu1.12, 2:4.17.12+dfsg-0+deb12u4, 2:4.19.5+dfsg-4ubuntu9.6+2 more16
OSV records
DEBIAN-CVE-2026-4480UBUNTU-CVE-2026-4480
Also known as
USN-8306-1, USN-8306-2

Charts affected

19 by stars
ChartLatestAffected imagesRadar Score
freeradiusstartechnicaVerified publisher1.2.01 of 1See more

freeradius startechnica 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-4480.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.2.8af6fd34a5b78
samba@2:4.15.13+dfsg-0ubuntu1.7
2:4.15.13+dfsg-0ubuntu1.12

Open the chart page →

5,751
powershelluniversaldigitalhubVerified publisher0.1.21 of 1See more

powershelluniversal digitalhub 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-4480.

Container imageDigestPackageFixed in
ironmansoftware/universal:3.3.1-ubuntu-20.041943c73cce31
samba@2:4.13.17~dfsg-0ubuntu1.20.04.1
2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2

Open the chart page →

6,940
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-4480.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
samba@2:4.17.12+dfsg-0+deb12u1
2:4.17.12+dfsg-0+deb12u4

Open the chart page →

11,458
music-assistant-serverlmatfyVerified publisher0.1.91 of 1See more

music-assistant-server lmatfy 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-4480.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
samba@2:4.17.12+dfsg-0+deb12u3
2:4.17.12+dfsg-0+deb12u4

Open the chart page →

7,201
photoprismmmontesVerified publisher0.14.01 of 1See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-4480.

Container imageDigestPackageFixed in
photoprism/photoprism:251130db16ee6b1ba3
samba@2:2.11.0+samba4.22.3+dfsg-4ubuntu2.2
2:4.22.3+dfsg-4ubuntu2.4

Open the chart page →

11,103
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2026-4480.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
samba@2:2.8.0+samba4.19.5+dfsg-4ubuntu9
2:4.19.5+dfsg-4ubuntu9.6

Open the chart page →

16,954
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-4480.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
samba@2:4.15.13+dfsg-0ubuntu0.20.04.8
2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2

Open the chart page →

64,489
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2026-4480.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
samba@2:4.19.5+dfsg-4ubuntu9.3
2:4.19.5+dfsg-4ubuntu9.6

Open the chart page →

5,292
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2026-4480.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
samba@2:2.11.0+samba4.22.8+dfsg-0+deb13u1
2:4.22.8+dfsg-0+deb13u2

Open the chart page →

29,817
music-assistantkarljorgensen0.1.31 of 1See more

music-assistant karljorgensen 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-4480.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
samba@2:4.17.12+dfsg-0+deb12u3
2:4.17.12+dfsg-0+deb12u4

Open the chart page →

7,081
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-4480.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
samba@2:2.6.2+samba4.17.12+dfsg-0+deb12u1
2:4.17.12+dfsg-0+deb12u4

Open the chart page →

37,942
cdn-remoteopencord0.2.41 of 3See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2026-4480.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:1.0.0d59ccb138ffb
samba@2:4.3.11+dfsg-0ubuntu0.16.04.18
no fix listed

Open the chart page →

63,223
freeradiusopencord1.0.41 of 1See more

freeradius opencord 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-4480.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.0.2121c8bfa904d8
samba@2:4.7.6+dfsg~ubuntu-0ubuntu2.15
no fix listed

Open the chart page →

15,702
mcord-cdn-remoteopencord0.1.61 of 2See more

mcord-cdn-remote opencord 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-4480.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
samba@2:4.3.11+dfsg-0ubuntu0.16.04.18
no fix listed

Open the chart page →

42,614
mcord-cdn-remote-freeopencord0.1.31 of 1See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-4480.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
samba@2:4.3.11+dfsg-0ubuntu0.16.04.18
no fix listed

Open the chart page →

29,124
voltha-infraopencord2.14.01 of 10See more

voltha-infra opencord 2.14.0

1 of the 10 container images this version deploys carry CVE-2026-4480.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.0.2121c8bfa904d8
samba@2:4.7.6+dfsg~ubuntu-0ubuntu2.15
no fix listed

Open the chart page →

41,044
vrisingryuunosukeds30.1.01 of 1See more

vrising ryuunosukeds3 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-4480.

Container imageDigestPackageFixed in
trueosiris/vrising:latest9356f98ad561
samba@2:4.15.13+dfsg-0ubuntu1.10
2:4.15.13+dfsg-0ubuntu1.12

Open the chart page →

7,295
freeradiussvtech-public-helm-charts0.1.51 of 4See more

freeradius svtech-public-helm-charts 0.1.5

1 of the 4 container images this version deploys carry CVE-2026-4480.

Container imageDigestPackageFixed in
ptthanh1511/freeradius-server:3.0.26-netdebug5741cbde85ab
samba@2:4.13.17~dfsg-0ubuntu1.20.04.1
2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2

Open the chart page →

12,655
owncloudth-chartsVerified publisher0.2.11 of 1See more

owncloud th-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-4480.

Container imageDigestPackageFixed in
owncloud/server:10.15.051d9b74fc2a8
samba@2:4.15.13+dfsg-0ubuntu0.20.04.7
2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2

Open the chart page →

10,006

Container images carrying it

16 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
omecproject/cdn-video-repo:1.0.0:remote-v3d59ccb138ffb
samba@2:4.3.11+dfsg-0ubuntu0.16.04.18
no fix listed
3
freeradius/freeradius-server:3.0.2121c8bfa904d8
samba@2:4.7.6+dfsg~ubuntu-0ubuntu2.15
no fix listed
2
cybrarist/discount-bandit:v4.0.4e9e2447ac666
samba@2:2.11.0+samba4.22.8+dfsg-0+deb13u1
2:4.22.8+dfsg-0+deb13u2
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
samba@2:4.15.13+dfsg-0ubuntu0.20.04.8
2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2
1
flanksource/batch-runner:v1.0.44689687a7cf95
samba@2:4.19.5+dfsg-4ubuntu9.3
2:4.19.5+dfsg-4ubuntu9.6
1
freeradius/freeradius-server:3.2.8af6fd34a5b78
samba@2:4.15.13+dfsg-0ubuntu1.7
2:4.15.13+dfsg-0ubuntu1.12
1
ironmansoftware/universal:3.3.1-ubuntu-20.041943c73cce31
samba@2:4.13.17~dfsg-0ubuntu1.20.04.1
2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2
1
owncloud/server:10.15.051d9b74fc2a8
samba@2:4.15.13+dfsg-0ubuntu0.20.04.7
2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2
1
photoprism/photoprism:251130db16ee6b1ba3
samba@2:2.11.0+samba4.22.3+dfsg-4ubuntu2.2
2:4.22.3+dfsg-4ubuntu2.4
1
photoprism/photoprism:240711-cefc6fd632ca74
samba@2:2.8.0+samba4.19.5+dfsg-4ubuntu9
2:4.19.5+dfsg-4ubuntu9.6
1
ptthanh1511/freeradius-server:3.0.26-netdebug5741cbde85ab
samba@2:4.13.17~dfsg-0ubuntu1.20.04.1
2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
samba@2:2.6.2+samba4.17.12+dfsg-0+deb12u1
2:4.17.12+dfsg-0+deb12u4
1
trueosiris/vrising:latest9356f98ad561
samba@2:4.15.13+dfsg-0ubuntu1.10
2:4.15.13+dfsg-0ubuntu1.12
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
samba@2:4.17.12+dfsg-0+deb12u1
2:4.17.12+dfsg-0+deb12u4
1
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
samba@2:4.17.12+dfsg-0+deb12u3
2:4.17.12+dfsg-0+deb12u4
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
samba@2:4.17.12+dfsg-0+deb12u3
2:4.17.12+dfsg-0+deb12u4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.