StackRadar

CVE-2026-54411

High

Advisory

Published 14 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
0.003
25th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,377
of 17,792 indexed, latest versions
Container images
2,370
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: pam security update

Carried by container images the latest versions of 2,377 of 17,792 indexed charts deploy, on 2,370 images.

Affected packageAffected versionsFixed inImages
pamdeb1.1.8-1ubuntu2, 1.1.8-1ubuntu2.2, 1.1.8-3.2ubuntu2, 1.1.8-3.2ubuntu2.1+33 more1.4.0-11ubuntu2.7, 1.5.3-5ubuntu5.6, 1.7.0-5+e5, 1.7.0-5ubuntu3.12,190
linux-pamapk1.7.2-r41.7.2-r53
pamrpm1.1.8-22.el7, 1.1.8-23.el7, 1.3.0-150000.6.86.1, 1.3.0-lp151.7.38+28 more0:1.1.8-23.el7_9.3, 0:1.3.1-40.el8_10, 0:1.5.1-27.el9_8.1, 0:1.5.1-28.el9_8.1+4 more177
OSV records
CGA-6xpv-g74w-9xwfDEBIAN-CVE-2026-54411RHSA-2026:56131RHSA-2026:59379RHSA-2026:60224RHSA-2026:61227RHSA-2026:64815RLSA-2026:56131RLSA-2026:59379RLSA-2026:64815UBUNTU-CVE-2026-54411ECHO-a8ba-b20f-6ddaopenSUSE-SU-2026:11201-1SUSE-SU-2026:22639-1SUSE-SU-2026:3163-1
Also known as
CGA-jvfq-ppr4-246f, RHSA-2026:61223, RHSA-2026:61224, RHSA-2026:61225, RHSA-2026:61226, RHSA-2026:61228, RHSA-2026:61230, USN-8601-1

Charts affected

2,377 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,370 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
pam@1.1.8-3.2ubuntu2.1
no fix listed
4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
pam@1.1.8-3.2ubuntu2.1
no fix listed
4
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
pam@1.4.0-11ubuntu2.3
1.4.0-11ubuntu2.7
4
library/mongo:5.0-focal5e15a3f014ed
pam@1.3.1-5ubuntu4.7
no fix listed
4
library/mongo:4.2.12-bionic628741415fc9
pam@1.1.8-3.6ubuntu2.18.04.2
no fix listed
4
library/mongo:4.4.66efa05203990
pam@1.1.8-3.6ubuntu2.18.04.3
no fix listed
4
library/nginx:1.27.1287ff321f9e3
pam@1.5.2-6+deb12u1
no fix listed
4
library/postgres:134689940c6838
pam@1.7.0-5
no fix listed
4
library/rabbitmq:3.11-managementc3f70098e01d
pam@1.4.0-11ubuntu2.4
1.4.0-11ubuntu2.7
4
mastercloudapps/planner:v1.2340a950b311b2
pam@1.4.0-11ubuntu2.3
1.4.0-11ubuntu2.7
4
opea/llm-tgi:1.00c25aab3f106
pam@1.5.2-6+deb12u1
no fix listed
4
oscarsotosanchez/weatherservice:v1.0911ec961d10b
pam@1.1.8-3.6ubuntu2.18.04.2
no fix listed
4
shashkist/flask-contacts-app:latest581de1fd6084
pam@1.5.2-6+deb12u1
no fix listed
4
valkey/valkey:9.0.2930b41430fb7
pam@1.7.0-5
no fix listed
4
ghcr.io/foundry-rs/foundry:latest0c00cb0bda1a
pam@1.4.0-11ubuntu2.6
1.4.0-11ubuntu2.7
4
apache/superset:6.1.0:latest16b50bbef664
pam@1.5.2-6+deb12u2
no fix listed
3
bitnamilegacy/kubectl:latestcd354d5b2556
pam@1.5.2-6+deb12u1
no fix listed
3
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
pam@1.5.2-6+deb12u1
no fix listed
3
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
pam@1.5.2-6+deb12u1
no fix listed
3
ciscolabs/rtsp-client:latesta7b60ec88285
pam@1.3.1-5ubuntu4.3
no fix listed
3
ciscolabs/rtsp-server:latestb59fc10bb821
pam@1.3.1-5ubuntu4.3
no fix listed
3
cloudve/cloudlaunch-server:latest4a3d7fae90bb
pam@1.3.1-5ubuntu4.3
no fix listed
3
codeurjc/planner:v1.0800cf520c245
pam@1.4.0-11ubuntu2.3
1.4.0-11ubuntu2.7
3
dgraph/dgraph:v21.12.03b55ea83fffe
pam@1.3.1-5ubuntu4.1
no fix listed
3
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
pam@1.5.2-6+deb12u1
no fix listed
3
envoyproxy/envoy:v1.31.02bf7f042e396
pam@1.4.0-11ubuntu2.4
1.4.0-11ubuntu2.7
3
gchq/hdfs:3.3.35ec58edbb2db
pam@1.5.3-5ubuntu5
1.5.3-5ubuntu5.6
3
guacamole/guacamole:1.6.0f344085e618b
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.6
3
jacobalberty/unifi:v10.0.162896c0ab82d33
pam@1.3.1-5ubuntu4.7
no fix listed
3
library/ghost:6.63.0e05bc1169fb2
pam@1.5.2-6+deb12u2
no fix listed
3
library/nginx:1.25:1.25.5a484819eb602
pam@1.5.2-6+deb12u1
no fix listed
3
library/node:ltsbe23f54a88d3
pam@1.5.2-6+deb12u2
no fix listed
3
library/python:3.12-slim78387bc3881b
pam@1.7.0-5
no fix listed
3
louislam/uptime-kuma:2.5.4917318f9d7be
pam@1.5.2-6+deb12u2
no fix listed
3
mcp/grafana:latest9362bcf6aa0e
pam@1.5.2-6+deb12u2
no fix listed
3
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
pam@1.3.1-11.el8
0:1.3.1-40.el8_10
3
omecproject/cdn-video-repo:1.0.0:remote-v3d59ccb138ffb
pam@1.1.8-3.2ubuntu2.1
no fix listed
3
opencsghq/postgres:15.19b98600564e07
pam@1.7.0-5
no fix listed
3
selenium/hub:3.141.5902f251d48d5f
pam@1.3.1-5ubuntu4.1
no fix listed
3
sigp/lighthouse:latest-amd6450f66cfebb6d
pam@1.4.0-11ubuntu2.6
1.4.0-11ubuntu2.7
3
solace/solace-pubsub-standard:latest8e8ad105595e
pam@1.5.1-28.el9
0:1.5.1-28.el9_8.1
3
vaultwarden/server:1.37.1ebdfe70701c6
pam@1.7.0-5
no fix listed
3
xenondb/percona:5.7.330e26872a2b67
pam@1.3.1-5ubuntu4.1
no fix listed
3
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
pam@1.5.2-6+deb12u1
no fix listed
3
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
pam@1.5.2-6
no fix listed
3
ghcr.io/donkie/spoolman:0.26.1cf9b41e17b93
pam@1.5.2-6+deb12u2
no fix listed
3
ghcr.io/huggingface/text-embeddings-inference:cpu-1.50502794a4d86
pam@1.5.2-6+deb12u1
no fix listed
3
ghcr.io/smarter-project/hydra/crismux:main673d5229df1f
pam@1.5.2-6+deb12u2
no fix listed
3
quay.io/devtron/ai-agent:0.0.16545dac92173
pam@1.5.2-6+deb12u1
no fix listed
3
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
pam@1.4.0-11ubuntu2
1.4.0-11ubuntu2.7
3

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.