StackRadar

CVE-2026-54411

High

Advisory

Published 14 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
0.003
25th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,423
of 17,828 indexed, latest versions
Container images
2,448
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: pam security update

Carried by container images the latest versions of 2,423 of 17,828 indexed charts deploy, on 2,448 images.

Affected packageAffected versionsFixed inImages
pamdeb1.1.8-1ubuntu2, 1.1.8-1ubuntu2.2, 1.1.8-3.2ubuntu2, 1.1.8-3.2ubuntu2.1+33 more1.4.0-11ubuntu2.7, 1.5.3-5ubuntu5.6, 1.7.0-5+e5, 1.7.0-5ubuntu3.12,272
pamrpm1.1.8-22.el7, 1.1.8-23.el7, 1.3.0-150000.6.86.1, 1.3.0-lp151.7.38+29 more0:1.1.8-23.el7_9.3, 0:1.3.1-40.el8_10, 0:1.5.1-27.el9_8.1, 0:1.5.1-28.el9_8.1+4 more176
OSV records
DEBIAN-CVE-2026-54411RHSA-2026:56131RHSA-2026:59379RHSA-2026:60224RHSA-2026:61227RHSA-2026:64815RLSA-2026:56131RLSA-2026:59379RLSA-2026:64815UBUNTU-CVE-2026-54411ECHO-a8ba-b20f-6ddaopenSUSE-SU-2026:11201-1SUSE-SU-2026:22639-1SUSE-SU-2026:3163-1
Also known as
RHSA-2026:61223, RHSA-2026:61224, RHSA-2026:61225, RHSA-2026:61226, RHSA-2026:61228, RHSA-2026:61230, USN-8601-1

Charts affected

2,423 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,448 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
pam@1.1.8-3.2ubuntu2.1
no fix listed
4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
pam@1.1.8-3.2ubuntu2.1
no fix listed
4
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
pam@1.4.0-11ubuntu2.3
1.4.0-11ubuntu2.7
4
library/mongo:5.0-focal5e15a3f014ed
pam@1.3.1-5ubuntu4.7
no fix listed
4
library/mongo:4.2.12-bionic628741415fc9
pam@1.1.8-3.6ubuntu2.18.04.2
no fix listed
4
library/mongo:4.4.66efa05203990
pam@1.1.8-3.6ubuntu2.18.04.3
no fix listed
4
library/nginx:1.27.1287ff321f9e3
pam@1.5.2-6+deb12u1
no fix listed
4
library/postgres:134689940c6838
pam@1.7.0-5
no fix listed
4
library/postgres:1767f41722b7a8
pam@1.7.0-5
no fix listed
4
library/postgres:16f1c3376c26f2
pam@1.7.0-5
no fix listed
4
library/rabbitmq:3.11-managementc3f70098e01d
pam@1.4.0-11ubuntu2.4
1.4.0-11ubuntu2.7
4
library/redis:7:7.4:7.4.1171da9275c5f3
pam@1.5.2-6+deb12u2
no fix listed
4
mastercloudapps/planner:v1.2340a950b311b2
pam@1.4.0-11ubuntu2.3
1.4.0-11ubuntu2.7
4
opea/llm-tgi:1.00c25aab3f106
pam@1.5.2-6+deb12u1
no fix listed
4
oscarsotosanchez/weatherservice:v1.0911ec961d10b
pam@1.1.8-3.6ubuntu2.18.04.2
no fix listed
4
shashkist/flask-contacts-app:latest581de1fd6084
pam@1.5.2-6+deb12u1
no fix listed
4
valkey/valkey:9.0.2930b41430fb7
pam@1.7.0-5
no fix listed
4
ghcr.io/foundry-rs/foundry:latest0c00cb0bda1a
pam@1.4.0-11ubuntu2.6
1.4.0-11ubuntu2.7
4
apache/superset:6.1.0:latest16b50bbef664
pam@1.5.2-6+deb12u2
no fix listed
3
bitnamilegacy/etcd:latest99b408c15272
pam@1.5.2-6+deb12u1
no fix listed
3
bitnamilegacy/kubectl:latestcd354d5b2556
pam@1.5.2-6+deb12u1
no fix listed
3
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
pam@1.5.2-6+deb12u1
no fix listed
3
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
pam@1.5.2-6+deb12u1
no fix listed
3
bitnamilegacy/postgresql:17.6.0-debian-12-r0de520acd66fc
pam@1.5.2-6+deb12u1
no fix listed
3
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
pam@1.5.2-6+deb12u1
no fix listed
3
bitnamilegacy/postgresql-repmgr:17.6.0-debian-12-r2f12387ec882b
pam@1.5.2-6+deb12u1
no fix listed
3
bitnamilegacy/valkey-cluster:8.1.3-debian-12-r332869e769b7e
pam@1.5.2-6+deb12u1
no fix listed
3
ciscolabs/rtsp-client:latesta7b60ec88285
pam@1.3.1-5ubuntu4.3
no fix listed
3
ciscolabs/rtsp-server:latestb59fc10bb821
pam@1.3.1-5ubuntu4.3
no fix listed
3
cloudve/cloudlaunch-server:latest4a3d7fae90bb
pam@1.3.1-5ubuntu4.3
no fix listed
3
codeurjc/planner:v1.0800cf520c245
pam@1.4.0-11ubuntu2.3
1.4.0-11ubuntu2.7
3
dgraph/dgraph:v21.12.03b55ea83fffe
pam@1.3.1-5ubuntu4.1
no fix listed
3
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
pam@1.5.2-6+deb12u1
no fix listed
3
envoyproxy/envoy:v1.31.02bf7f042e396
pam@1.4.0-11ubuntu2.4
1.4.0-11ubuntu2.7
3
gchq/hdfs:3.3.35ec58edbb2db
pam@1.5.3-5ubuntu5
1.5.3-5ubuntu5.6
3
guacamole/guacamole:1.6.0f344085e618b
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.6
3
istio/kubectl:1.5.10dbb7726d1bf0
pam@1.1.8-3.6ubuntu2.18.04.1
no fix listed
3
jacobalberty/unifi:v10.0.162896c0ab82d33
pam@1.3.1-5ubuntu4.7
no fix listed
3
library/memcached:1.6:1.6.4575c93cc91e76
pam@1.7.0-5
no fix listed
3
library/nginx:1.25:1.25.5a484819eb602
pam@1.5.2-6+deb12u1
no fix listed
3
library/node:lts64af3819f927
pam@1.5.2-6+deb12u2
no fix listed
3
localstack/localstack:latest4abc29e923e5
pam@1.7.0-5
no fix listed
3
mcp/grafana:latest9362bcf6aa0e
pam@1.5.2-6+deb12u2
no fix listed
3
meshery/meshery:stable-latest44b64ee128fb
pam@1.5.2-6+deb12u2
no fix listed
3
minio/operator:v4.3.754393e03f3b2
pam@1.3.1-15.el8
0:1.3.1-40.el8_10
3
omecproject/cdn-video-repo:1.0.0:remote-v3d59ccb138ffb
pam@1.1.8-3.2ubuntu2.1
no fix listed
3
opencsghq/postgres:15.19b98600564e07
pam@1.7.0-5
no fix listed
3
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
pam@1.4.0-11ubuntu2.1
1.4.0-11ubuntu2.7
3
openebs/node-disk-operator:2.1.06afe2123c457
pam@1.4.0-11ubuntu2.1
1.4.0-11ubuntu2.7
3
selenium/hub:3.141.5902f251d48d5f
pam@1.3.1-5ubuntu4.1
no fix listed
3

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.