CVE-2026-54411
HighAdvisory
Published 14 Jun 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.2
- base score, highest
- EPSS
- 0.003
- 25th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 2,445
- of 17,813 indexed, latest versions
- Container images
- 2,469
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Red Hat Security Advisory: pam security update
Carried by container images the latest versions of 2,445 of 17,813 indexed charts deploy, on 2,469 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| pamdeb | 1.1.8-1ubuntu2, 1.1.8-1ubuntu2.2, 1.1.8-3.2ubuntu2, 1.1.8-3.2ubuntu2.1+33 more | 1.4.0-11ubuntu2.7, 1.5.3-5ubuntu5.6, 1.7.0-5+e5, 1.7.0-5ubuntu3.1 | 2,292 |
| pamrpm | 1.1.8-22.el7, 1.1.8-23.el7, 1.3.0-150000.6.86.1, 1.3.0-lp151.7.38+29 more | 0:1.1.8-23.el7_9.3, 0:1.3.1-40.el8_10, 0:1.5.1-27.el9_8.1, 0:1.5.1-28.el9_8.1+4 more | 177 |
- OSV records
- DEBIAN-CVE-2026-54411RHSA-2026:56131RHSA-2026:59379RHSA-2026:60224RHSA-2026:61227RHSA-2026:64815RLSA-2026:56131RLSA-2026:59379RLSA-2026:64815UBUNTU-CVE-2026-54411ECHO-a8ba-b20f-6ddaopenSUSE-SU-2026:11201-1SUSE-SU-2026:22639-1SUSE-SU-2026:3163-1
- Also known as
- RHSA-2026:61223, RHSA-2026:61224, RHSA-2026:61225, RHSA-2026:61226, RHSA-2026:61228, RHSA-2026:61230, USN-8601-1
Charts affected
2,445 by stars
Container images carrying it
2,469 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| carbone/ | 518172cbad49 | pam | no fix listed | 1 |
| carlosmz87/ | 8ffa63aa995d | pam | no fix listed | 1 |
| castai/ | da62858c8381 | pam | no fix listed | 1 |
| castlemock/ | b7f3f1527ba9 | pam | 1.5.3-5ubuntu5.6 | 1 |
| castopod/ | 1fd37280cbb2 | pam | no fix listed | 1 |
| castopod/ | 4e4f0440520f | pam | no fix listed | 1 |
| cbioportal/ | 08debbd2dbf9 | pam | 1.5.3-5ubuntu5.6 | 1 |
| cccs/ | 098127270065 | pam | no fix listed | 1 |
| cccs/ | 2be5e6a57427 | pam | no fix listed | 1 |
| cccs/ | 2b88493b62f7 | pam | no fix listed | 1 |
| cccs/ | efa75509b854 | pam | no fix listed | 1 |
| ceresdb/ | 53b2d0dbba1f | pam | no fix listed | 1 |
| cfcontainerization/ | 82fa261c18a8 | pam | 1.7.2+git12-2.1 | 1 |
| cfcontainerization/ | 58fb1c173a46 | pam | 1.7.2+git12-2.1 | 1 |
| chaerr/ | 66833deec017 | pam | no fix listed | 1 |
| chainsafe/ | 5593f6e97912 | pam | no fix listed | 1 |
| chainsafe/ | 7b9fe4aa8073 | pam | no fix listed | 1 |
| checkmk/ | c11b422210c4 | pam | 1.4.0-11ubuntu2.7 | 1 |
| chetangautamm/ | b4b94155ff5a | pam | no fix listed | 1 |
| chetangautamm/ | e7f7049e1544 | pam | no fix listed | 1 |
| cheveo/ | 82240f890884 | pam | 1.4.0-11ubuntu2.7 | 1 |
| cheyang/ | 46cc34755493 | pam | no fix listed | 1 |
| chiefonboarding/ | d0964135ea82 | pam | no fix listed | 1 |
| chocobozzz/ | 052712130691 | pam | no fix listed | 1 |
| chriseaton/ | 54c3384ce701 | pam | 1.4.0-11ubuntu2.7 | 1 |
| chromadb/ | fc8dc8e11fb2 | pam | no fix listed | 1 |
| circleci/ | 9bdc62f02162 | pam | no fix listed | 1 |
| ciscolabs/ | 36d02faad958 | pam | 1.4.0-11ubuntu2.7 | 1 |
| citizenstig/ | b81c818ccb86 | pam | no fix listed | 1 |
| ckan/ | 87ecf3f27ad6 | pam | no fix listed | 1 |
| ckan/ | ef8e5d3e6be1 | pam | 1.4.0-11ubuntu2.7 | 1 |
| ckulka/ | 434bdd162247 | pam | no fix listed | 1 |
| cleveritcz/ | c75c1636e0b7 | pam | 0:1.5.1-28.el9_8.1 | 1 |
| clickhouse/ | 1ffa82edee00 | pam | no fix listed | 1 |
| clickhouse/ | 2e6587b81a26 | pam | no fix listed | 1 |
| clickhouse/ | 512bb8a21483 | pam | no fix listed | 1 |
| clickhouse/ | 8745843b17f9 | pam | 1.4.0-11ubuntu2.7 | 1 |
| clickhouse/ | 92098d3b31dd | pam | 1.4.0-11ubuntu2.7 | 1 |
| clickhouse/ | a65ca89ddbe8 | pam | 1.4.0-11ubuntu2.7 | 1 |
| clickhouse/ | b627d7a9bc0e | pam | 1.4.0-11ubuntu2.7 | 1 |
| clickhouse/ | dc5658853ce1 | pam | 1.4.0-11ubuntu2.7 | 1 |
| clickhouse/ | e019438e1e05 | pam | 1.4.0-11ubuntu2.7 | 1 |
| cloudtooling/ | f4f04e0fc401 | pam | no fix listed | 1 |
| cloudtooling/ | db89d95f1d14 | pam | no fix listed | 1 |
| cloudve/ | af56e77ca587 | pam | no fix listed | 1 |
| cloudve/ | d79c1c5881c0 | pam | no fix listed | 1 |
| clowder/ | 11f3d844e4c0 | pam | no fix listed | 1 |
| clowder/ | 14155326c7b9 | pam | no fix listed | 1 |
| clowder/ | bf146f1ca24f | pam | no fix listed | 1 |
| cm2network/ | 8cba47f53df5 | pam | no fix listed | 1 |