StackRadarChart IndexLive demo

CVE-2026-49268

High

Advisory

Published 17 Jun 2026In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 8.8; base score, highest
EPSS: 0.005; 41st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 35; of 17,781 indexed, latest versions
Container images: 29; deployed by those charts
Fix available: 1 of 1; affected package

Apache Shiro: LDAP DN Injection in DefaultLdapRealm

Carried by container images the latest versions of 35 of 17,781 indexed charts deploy, on 29 images.

Affected package	Affected versions	Fixed in	Images
shiro-coremaven	1.2.3, 1.2.6, 1.4.0, 1.6.0+12 more	2.2.1	29

OSV records: GHSA-x96m-rh44-vgv8

Charts affected

35 by stars

Chart

Latest

Affected images

Radar Score

neo4jneo4j-helm

1 of 1 See more

neo4j neo4j-helm 4.3.2-1

1 of the 1 container images this version deploys carry CVE-2026-49268.

Container image	Digest	Package	Fixed in
library/neo4j :4.3.2-enterprise	56a9453c4064	shiro-core@1.7.1	2.2.1

Open the chart page →

2,640

grayloggroundhog2k

1 of 1 See more

graylog groundhog2k 0.13.10

1 of the 1 container images this version deploys carry CVE-2026-49268.

Container image	Digest	Package	Fixed in
graylog/graylog :7.1.9	598bd41fefd5	shiro-core@2.1.0	2.2.1

Open the chart page →

1,074

grayloggraylog2

1 of 2 See more

graylog graylog2 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-49268.

Container image	Digest	Package	Fixed in
graylog/graylog-enterprise :7.1.8	8a1f641cd7aa	shiro-core@2.1.0	2.2.1

Open the chart page →

1,500

nexus-iq-serversonatype

1 of 1 See more

nexus-iq-server sonatype 207.1.0

1 of the 1 container images this version deploys carry CVE-2026-49268.

Container image	Digest	Package	Fixed in
sonatype/nexus-iq-server :1.207.1	a70014ed10b1	shiro-core@2.2.0	2.2.1

Open the chart page →

38

thehivestrangebee-helm

1 of 7 See more

thehive strangebee-helm 1.0.6

1 of the 7 container images this version deploys carry CVE-2026-49268.

Container image	Digest	Package	Fixed in
strangebee/thehive :5.7.6-1	e77b713124dd	shiro-core@1.13.0	2.2.1

Open the chart page →

16,210

infrahubinfrahub

1 of 5 See more

infrahub infrahub 4.33.2

1 of the 5 container images this version deploys carry CVE-2026-49268.

Container image	Digest	Package	Fixed in
library/neo4j :2026.05.0	6c162e2432f8	shiro-core@2.1.0	2.2.1

Open the chart page →

10,428

scm-managerscm-manager

1 of 1 See more

scm-manager scm-manager 3.12.1

1 of the 1 container images this version deploys carry CVE-2026-49268.

Container image	Digest	Package	Fixed in
scmmanager/scm-manager :3.12.1	bfb766050f34	shiro-core@1.13.0	2.2.1

Open the chart page →

649

infrahub-enterpriseinfrahub-enterprise

1 of 5 See more

infrahub-enterprise infrahub-enterprise 4.19.2

1 of the 5 container images this version deploys carry CVE-2026-49268.

Container image	Digest	Package	Fixed in
library/neo4j :2026.05.0-enterprise	2caf944aa4a5	shiro-core@2.1.0	2.2.1

Open the chart page →

10,530

neo4j-communityequinor-charts

1 of 1 See more

neo4j-community equinor-charts 1.2.5

1 of the 1 container images this version deploys carry CVE-2026-49268.

Container image	Digest	Package	Fixed in
library/neo4j :4.2.4	348e3f56faa2	shiro-core@1.7.1	2.2.1

Open the chart page →

2,751

omada-controllergeek-cookbook

1 of 1 See more

omada-controller geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-49268.

Container image	Digest	Package	Fixed in
mbentley/omada-controller :4.3	f4e682274bed	shiro-core@1.4.0	2.2.1

Open the chart page →

11,553

prowlerprowler-app

1 of 5 See more

prowler prowler-app 0.0.9

1 of the 5 container images this version deploys carry CVE-2026-49268.

Container image	Digest	Package	Fixed in
library/neo4j :2026.02.2	5ab4ab0358cf	shiro-core@2.0.6	2.2.1

Open the chart page →

8,158

nexus-iq-server-hasonatype

1 of 2 See more

nexus-iq-server-ha sonatype 207.1.0

1 of the 2 container images this version deploys carry CVE-2026-49268.

Container image	Digest	Package	Fixed in
sonatype/nexus-iq-server :1.207.1	a70014ed10b1	shiro-core@2.2.0	2.2.1

Open the chart page →

38

1 of 3 See more

graylog t3n 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-49268.

Container image	Digest	Package	Fixed in
graylog2/server :2.4.3-3	8ff28c66e6c1	shiro-core@1.4.0	2.2.1

Open the chart page →

8,063

zunivers-ninjaalexpresso

1 of 2 See more

zunivers-ninja alexpresso 1.31.2

1 of the 2 container images this version deploys carry CVE-2026-49268.

Container image	Digest	Package	Fixed in
library/neo4j :5.18.1	8f01f7bb053e	shiro-core@1.13.0	2.2.1

Open the chart page →

1,165

omada-controllerandrelote-k8s

1 of 1 See more

omada-controller andrelote-k8s 4.5.0

1 of the 1 container images this version deploys carry CVE-2026-49268.

Container image	Digest	Package	Fixed in
mbentley/omada-controller :4.3	f4e682274bed	shiro-core@1.4.0	2.2.1

Open the chart page →

11,553

axelor-open-suiteaxelor-open-suite

1 of 2 See more

axelor-open-suite axelor-open-suite 7.2.58

1 of the 2 container images this version deploys carry CVE-2026-49268.

Container image	Digest	Package	Fixed in
pmoscode/axelor-open-suite :v7.2.57	a58f4d762f5c	shiro-core@1.9.1	2.2.1

Open the chart page →

9,722

cassandra-reapercloudnativeapp

1 of 1 See more

cassandra-reaper cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-49268.

Container image	Digest	Package	Fixed in
thelastpickle/cassandra-reaper :1.3.0	9c53996c457d	shiro-core@1.2.3	2.2.1

Open the chart page →

5,078

neo4jcloudnativeapp

1 of 1 See more

neo4j cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-49268.

Container image	Digest	Package	Fixed in
library/neo4j :3.4.5-enterprise	a1ba477fa412	shiro-core@1.4.0	2.2.1

Open the chart page →

2,837

shenyuerdeng

1 of 2 See more

shenyu erdeng 2.4.21

1 of the 2 container images this version deploys carry CVE-2026-49268.

Container image	Digest	Package	Fixed in
apache/shenyu-admin :2.4.2	e8b7c4ddd069	shiro-core@1.7.0	2.2.1

Open the chart page →

12,513

my-chartfleet-web-app

1 of 6 See more

my-chart fleet-web-app 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-49268.

Container image	Digest	Package	Fixed in
richardchesterwood/k8s-fleetman-queue :release2	f7f8d5951155	shiro-core@1.10.1	2.2.1

Open the chart page →

24,296

grayloggraylog

1 of 4 See more

graylog graylog 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-49268.

Container image	Digest	Package	Fixed in
graylog/graylog :6.1.10	19de1aff48c2	shiro-core@2.0.1	2.2.1

Open the chart page →

5,261

jenainseefrlab

1 of 1 See more

jena inseefrlab 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-49268.

Container image	Digest	Package	Fixed in
stain/jena-fuseki :latest	b1d0c96f19ad	shiro-core@2.0.1	2.2.1

Open the chart page →

1,262

nexusjenkins-x

1 of 1 See more

nexus jenkins-x 0.1.37

1 of the 1 container images this version deploys carry CVE-2026-49268.

Container image	Digest	Package	Fixed in
ghcr.io/jenkins-x/nexus :0.1.37	8caf5289fe73	shiro-core@1.6.0	2.2.1

Open the chart page →

12,856

shinsei-managerjtekt

1 of 8 See more

shinsei-manager jtekt 0.2.0

1 of the 8 container images this version deploys carry CVE-2026-49268.

Container image	Digest	Package	Fixed in
library/neo4j :5.20.0	52d3dec8d455	shiro-core@2.0.0	2.2.1

Open the chart page →

63,461

ladeitladeit

1 of 2 See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-49268.

Container image	Digest	Package	Fixed in
ladeit/ladeit :latest	962b665ffe82	shiro-core@1.4.0	2.2.1

Open the chart page →

26,356

activemqmicroboxlabs

1 of 1 See more

activemq microboxlabs 3.8.0

1 of the 1 container images this version deploys carry CVE-2026-49268.

Container image	Digest	Package	Fixed in
alfresco/alfresco-activemq :5.18.7-jre17-rockylinux8	5472f88d9b0b	shiro-core@1.13.0	2.2.1

Open the chart page →

1,494

MINTmint

1 of 15 See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2026-49268.

Container image	Digest	Package	Fixed in
mintproject/model-catalog-endpoint :29256555a6fbaefae4729d5cd259564708a4ab04	ffbb13f20465	shiro-core@1.2.6	2.2.1

Open the chart page →

43,341

user-manager-neo4jmoreillon

1 of 6 See more

user-manager-neo4j moreillon 0.9.7

1 of the 6 container images this version deploys carry CVE-2026-49268.

Container image	Digest	Package	Fixed in
library/neo4j :5.20.0	52d3dec8d455	shiro-core@2.0.0	2.2.1

Open the chart page →

30,363

neo4jneo4j-helm-old

1 of 1 See more

neo4j neo4j-helm-old 4.3.2-1

1 of the 1 container images this version deploys carry CVE-2026-49268.

Container image	Digest	Package	Fixed in
library/neo4j :4.3.2-enterprise	56a9453c4064	shiro-core@1.7.1	2.2.1

Open the chart page →

2,640

onedevonedev

1 of 1 See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2026-49268.

Container image	Digest	Package	Fixed in
1dev/server :11.9.0	cd5b12fe5471	shiro-core@1.13.0	2.2.1

Open the chart page →

6,037

apache-knox-helmpfisterer-knox

1 of 1 See more

apache-knox-helm pfisterer-knox 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-49268.

Container image	Digest	Package	Fixed in
farberg/apache-knox-docker :1.6.1	4b4a22487394	shiro-core@1.7.0	2.2.1

Open the chart page →

6,237

shenyushenyu

1 of 2 See more

shenyu shenyu 0.6.3

1 of the 2 container images this version deploys carry CVE-2026-49268.

Container image	Digest	Package	Fixed in
apache/shenyu-admin :2.5.1	e2be712fc4f4	shiro-core@1.8.0	2.2.1

Open the chart page →

8,804

shenyushenyu-helm-chart-test

1 of 2 See more

shenyu shenyu-helm-chart-test 2.4.27

1 of the 2 container images this version deploys carry CVE-2026-49268.

Container image	Digest	Package	Fixed in
apache/shenyu-admin :2.4.2	e8b7c4ddd069	shiro-core@1.7.0	2.2.1

Open the chart page →

12,513

sonatype-nexus3simcube

1 of 2 See more

sonatype-nexus3 simcube 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-49268.

Container image	Digest	Package	Fixed in
sonatype/nexus3 :3.58.1	586060431b64	shiro-core@1.10.0	2.2.1

Open the chart page →

4,946

shenyutest-helm

1 of 2 See more

shenyu test-helm 2.4.21

1 of the 2 container images this version deploys carry CVE-2026-49268.

Container image	Digest	Package	Fixed in
apache/shenyu-admin :2.4.2	e8b7c4ddd069	shiro-core@1.7.0	2.2.1

Open the chart page →

12,513

Container images carrying it

29 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
apache/shenyu-admin :2.4.2	e8b7c4ddd069	shiro-core@1.7.0	2.2.1	3
library/neo4j :5.20.0	52d3dec8d455	shiro-core@2.0.0	2.2.1	2
library/neo4j :4.3.2-enterprise	56a9453c4064	shiro-core@1.7.1	2.2.1	2
mbentley/omada-controller :4.3	f4e682274bed	shiro-core@1.4.0	2.2.1	2
sonatype/nexus-iq-server :1.207.1	a70014ed10b1	shiro-core@2.2.0	2.2.1	2
1dev/server :11.9.0	cd5b12fe5471	shiro-core@1.13.0	2.2.1	1
alfresco/alfresco-activemq :5.18.7-jre17-rockylinux8	5472f88d9b0b	shiro-core@1.13.0	2.2.1	1
apache/shenyu-admin :2.5.1	e2be712fc4f4	shiro-core@1.8.0	2.2.1	1
farberg/apache-knox-docker :1.6.1	4b4a22487394	shiro-core@1.7.0	2.2.1	1
graylog2/server :2.4.3-3	8ff28c66e6c1	shiro-core@1.4.0	2.2.1	1
graylog/graylog :6.1.10	19de1aff48c2	shiro-core@2.0.1	2.2.1	1
graylog/graylog :7.1.9	598bd41fefd5	shiro-core@2.1.0	2.2.1	1
graylog/graylog-enterprise :7.1.8	8a1f641cd7aa	shiro-core@2.1.0	2.2.1	1
ladeit/ladeit :latest	962b665ffe82	shiro-core@1.4.0	2.2.1	1
library/neo4j :2026.05.0-enterprise	2caf944aa4a5	shiro-core@2.1.0	2.2.1	1
library/neo4j :4.2.4	348e3f56faa2	shiro-core@1.7.1	2.2.1	1
library/neo4j :2026.02.2	5ab4ab0358cf	shiro-core@2.0.6	2.2.1	1
library/neo4j :2026.05.0	6c162e2432f8	shiro-core@2.1.0	2.2.1	1
library/neo4j :5.18.1	8f01f7bb053e	shiro-core@1.13.0	2.2.1	1
library/neo4j :3.4.5-enterprise	a1ba477fa412	shiro-core@1.4.0	2.2.1	1
mintproject/model-catalog-endpoint :29256555a6fbaefae4729d5cd259564708a4ab04	ffbb13f20465	shiro-core@1.2.6	2.2.1	1
pmoscode/axelor-open-suite :v7.2.57	a58f4d762f5c	shiro-core@1.9.1	2.2.1	1
richardchesterwood/k8s-fleetman-queue :release2	f7f8d5951155	shiro-core@1.10.1	2.2.1	1
scmmanager/scm-manager :3.12.1	bfb766050f34	shiro-core@1.13.0	2.2.1	1
sonatype/nexus3 :3.58.1	586060431b64	shiro-core@1.10.0	2.2.1	1
stain/jena-fuseki :latest	b1d0c96f19ad	shiro-core@2.0.1	2.2.1	1
strangebee/thehive :5.7.6-1	e77b713124dd	shiro-core@1.13.0	2.2.1	1
thelastpickle/cassandra-reaper :1.3.0	9c53996c457d	shiro-core@1.2.3	2.2.1	1
ghcr.io/jenkins-x/nexus :0.1.37	8caf5289fe73	shiro-core@1.6.0	2.2.1	1