CVE-2026-54411
HighAdvisory
Published 14 Jun 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.2
- base score, highest
- EPSS
- 0.003
- 25th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 2,376
- of 17,792 indexed, latest versions
- Container images
- 2,369
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Security Advisory: pam security update
Carried by container images the latest versions of 2,376 of 17,792 indexed charts deploy, on 2,369 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| pamdeb | 1.1.8-1ubuntu2, 1.1.8-1ubuntu2.2, 1.1.8-3.2ubuntu2, 1.1.8-3.2ubuntu2.1+33 more | 1.4.0-11ubuntu2.7, 1.5.3-5ubuntu5.6, 1.7.0-5+e5, 1.7.0-5ubuntu3.1 | 2,190 |
| linux-pamapk | 1.7.2-r4 | 1.7.2-r5 | 2 |
| pamrpm | 1.1.8-22.el7, 1.1.8-23.el7, 1.3.0-150000.6.86.1, 1.3.0-lp151.7.38+28 more | 0:1.1.8-23.el7_9.3, 0:1.3.1-40.el8_10, 0:1.5.1-27.el9_8.1, 0:1.5.1-28.el9_8.1+4 more | 177 |
- OSV records
- CGA-6xpv-g74w-9xwfDEBIAN-CVE-2026-54411RHSA-2026:56131RHSA-2026:59379RHSA-2026:60224RHSA-2026:61227RHSA-2026:64815RLSA-2026:56131RLSA-2026:59379RLSA-2026:64815UBUNTU-CVE-2026-54411ECHO-a8ba-b20f-6ddaopenSUSE-SU-2026:11201-1SUSE-SU-2026:22639-1SUSE-SU-2026:3163-1
- Also known as
- CGA-jvfq-ppr4-246f, RHSA-2026:61223, RHSA-2026:61224, RHSA-2026:61225, RHSA-2026:61226, RHSA-2026:61228, RHSA-2026:61230, USN-8601-1
Charts affected
2,376 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| discount-bandithelmforgeVerified publisher | 2.0.8 | 1 of 3See more | 29,930 |
| druidhelmforgeVerified publisher | 1.3.6 | 1 of 4See more | 8,623 |
| drupalhelmforgeVerified publisher | 1.2.13 | 1 of 2See more | 3,884 |
| entehelmforgeVerified publisher | 1.0.2 | 2 of 4See more | 4,254 |
| fastmcp-serverhelmforgeVerified publisher | 1.7.4 | 1 of 1See more | 3,304 |
| generichelmforgeVerified publisher | 3.1.5 | 1 of 1See more | 1,849 |
| ghosthelmforgeVerified publisher | 1.2.7 | 1 of 3See more | 2,485 |
| hoppscotchhelmforgeVerified publisher | 1.1.11 | 1 of 2See more | 2,076 |
| immichhelmforgeVerified publisher | 1.2.8 | 4 of 5See more | 11,122 |
| jenkinshelmforgeVerified publisher | 1.0.9 | 1 of 1See more | 2,498 |
| jupyterhubhelmforgeVerified publisher | 1.0.6 | 1 of 3See more | 5,361 |
| listmonkhelmforgeVerified publisher | 1.1.14 | 1 of 3See more | 2,863 |
| matterbridgehelmforgeVerified publisher | 1.0.3 | 1 of 1See more | 917 |
| mcp-serverhelmforgeVerified publisher | 1.0.0 | 1 of 1See more | 3,453 |
| medikeephelmforgeVerified publisher | 2.0.1 | 2 of 3See more | 5,430 |
| memcachedhelmforgeVerified publisher | 1.0.8 | 1 of 1See more | 1,074 |
| metabasehelmforgeVerified publisher | 1.2.29 | 1 of 3See more | 1,676 |
| middlewarehelmforgeVerified publisher | 1.2.6 | 3 of 4See more | 9,771 |
| moodlehelmforgeVerified publisher | 1.1.0 | 2 of 2See more | 6,206 |
| netboxhelmforgeVerified publisher | 2.0.1 | 2 of 4See more | 4,347 |
| nextcloudhelmforgeVerified publisher | 1.0.0 | 3 of 3See more | 7,211 |
| notediscoveryhelmforgeVerified publisher | 2.0.1 | 1 of 1See more | 1,263 |
| opencuthelmforgeVerified publisher | 1.1.9 | 2 of 5See more | 3,772 |
| paprahelmforgeVerified publisher | 1.0.0 | 1 of 1See more | 2,560 |
| phpmyadminhelmforgeVerified publisher | 2.0.1 | 1 of 1See more | 4,819 |
| qdranthelmforgeVerified publisher | 1.0.5 | 1 of 1See more | 829 |
| reactive-resumehelmforgeVerified publisher | 1.0.0 | 2 of 4See more | 3,071 |
| ryothelmforgeVerified publisher | 1.0.0 | 2 of 2See more | 6,068 |
| strapihelmforgeVerified publisher | 2.3.14 | 1 of 3See more | 2,084 |
| supersethelmforgeVerified publisher | 1.3.6 | 3 of 5See more | 5,784 |
| text-embeddings-inferencehelmforgeVerified publisher | 1.0.0 | 1 of 2See more | 2,563 |
| twentyhelmforgeVerified publisher | 1.0.1 | 2 of 5See more | 3,649 |
| wallabaghelmforgeVerified publisher | 1.3.6 | 1 of 3See more | 2,784 |
| myapphelmingapp | 0.1.0 | 1 of 1See more | 12,680 |
| jellyfinhelm-l3st86Verified publisher | 0.1.8 | 1 of 1See more | 2,626 |
| openaevhelm-openbasVerified publisher | 2.0.5 | 2 of 7See more | 7,528 |
| openbashelm-openbasVerified publisher | 1.8.14 | 4 of 7See more | 25,190 |
| pageshelm-repo | 1.0.0 | 2 of 3See more | 20,242 |
| steampipehelm-steampipeVerified publisher | 2.4.1 | 1 of 1See more | 3,154 |
| svacerhelm-svacer | 0.6.0 | 1 of 1See more | 6,085 |
| my-nginxhelmtaiwo | 0.1.0 | 1 of 1See more | 1,849 |
| samplehelmapphelmtraining | 3.0.0 | 1 of 1See more | 5,996 |
| nominatimheywood8-helm-chartsVerified publisher | 3.10.8 | 1 of 3See more | 14,363 |
| hivemq-edgehivemqOfficialVerified publisher | 0.1.36 | 1 of 1See more | 1,238 |
| printserverhmediadeVerified publisher | 1.0.2 | 2 of 4See more | 10,948 |
| home-ha-mockhome-ha-mockVerified publisher | 2.0.5 | 1 of 1See more | 3,065 |
| paperlesshomelabcihelmchartstestVerified publisher | 9.1.9 | 1 of 1See more | 16,415 |
| home-security-demohome-security-demoVerified publisher | 2.0.12 | 1 of 3See more | 3,148 |
| paperlesshpVerified publisher | 0.1.2 | 3 of 5See more | 26,984 |
| hammerspace-csihscsi | 1.2.8 | 1 of 6See more | 4,498 |
Container images carrying it
2,369 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| stackstorm/ | b1de2055c362 | pam | no fix listed | 1 |
| stackstorm/ | b1a338f64773 | pam | no fix listed | 1 |
| stackstorm/ | 1c8904a3bf67 | pam | no fix listed | 1 |
| stackstorm/ | 1bf35bfaf00c | pam | no fix listed | 1 |
| stackstorm/ | 09989a26c8b7 | pam | no fix listed | 1 |
| stackstorm/ | 19fdfffdbba8 | pam | no fix listed | 1 |
| stalwartlabs/ | 25001929f36a | pam | no fix listed | 1 |
| stalwartlabs/ | 388dcb75a707 | pam | no fix listed | 1 |
| stalwartlabs/ | 74ca4f7f6885 | pam | no fix listed | 1 |
| stalwartlabs/ | dcf575db2d53 | pam | no fix listed | 1 |
| stashapp/ | 24dbd7607174 | pam | no fix listed | 1 |
| stashapp/ | a534c8afdf39 | pam | 1.5.3-5ubuntu5.6 | 1 |
| statcan/ | 3921305425b8 | pam | no fix listed | 1 |
| statusim/ | 6ccd9d382885 | pam | no fix listed | 1 |
| strangebee/ | a7f7b05fba24 | pam | no fix listed | 1 |
| streamnative/ | 11bceacec8fb | pam | no fix listed | 1 |
| structurizr/ | 4b5ffb5119c8 | pam | 1.5.3-5ubuntu5.6 | 1 |
| substratusai/ | 61695be635eb | pam | no fix listed | 1 |
| supabase/ | 2781daf92394 | pam | no fix listed | 1 |
| supabase/ | eff9c554d649 | pam | no fix listed | 1 |
| supabase/ | 49bfe526f1b4 | pam | no fix listed | 1 |
| supabase/ | a84cc713585e | pam | no fix listed | 1 |
| supabase/ | d0a96973e9f1 | pam | no fix listed | 1 |
| supabase/ | aa1c92c0cf32 | pam | no fix listed | 1 |
| supabase/ | d207e6e23ad3 | pam | no fix listed | 1 |
| supabase/ | d3aa0c86c7b3 | pam | no fix listed | 1 |
| supabase/ | 26d8070c55e9 | pam | no fix listed | 1 |
| supabase/ | 606aca9fdaa7 | pam | no fix listed | 1 |
| supabase/ | 94a2a9d2906e | pam | no fix listed | 1 |
| svtechnmaa/ | a934ffd63d25 | pam | 1.4.0-11ubuntu2.7 | 1 |
| svtechnmaa/ | 1d71314424aa | pam | no fix listed | 1 |
| svtechnmaa/ | 410a25b51f9f | pam | 1.4.0-11ubuntu2.7 | 1 |
| svtechnmaa/ | 18394b08e6c3 | pam | no fix listed | 1 |
| svtechnmaa/ | 6e368ace0977 | pam | no fix listed | 1 |
| swimmwatch/ | d48c705a58c8 | pam | no fix listed | 1 |
| sysnet4admin/ | bc25b152d88e | pam | 1.4.0-11ubuntu2.7 | 1 |
| sysnet4admin/ | e74b43c7f492 | pam | no fix listed | 1 |
| sysnet4admin/ | 5802bfcd7fed | pam | no fix listed | 1 |
| sysnet4admin/ | 74ded2d92f07 | pam | no fix listed | 1 |
| tautulli/ | 670e68dd9efc | pam | no fix listed | 1 |
| tdengine/ | 4140a4021ddb | pam | no fix listed | 1 |
| teknas09/ | 12a1fa85c4aa | pam | no fix listed | 1 |
| tensorflow/ | 8a208c232297 | pam | 1.4.0-11ubuntu2.7 | 1 |
| tensorflow/ | 1e3172090703 | pam | no fix listed | 1 |
| tensorzero/ | c939db4f27e4 | pam | no fix listed | 1 |
| tensorzero/ | f2563d54724e | pam | no fix listed | 1 |
| tenureai/ | 5f5b222df9a5 | pam | no fix listed | 1 |
| teslamate/ | cc87082e7d67 | pam | no fix listed | 1 |
| testinprod/ | 0a125bd77a2d | pam | no fix listed | 1 |
| thecampagnards/ | 7dca9d973837 | pam | no fix listed | 1 |