StackRadar

CVE-2026-54411

High

Advisory

Published 14 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
0.003
25th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,428
of 17,821 indexed, latest versions
Container images
2,444
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: pam security update

Carried by container images the latest versions of 2,428 of 17,821 indexed charts deploy, on 2,444 images.

Affected packageAffected versionsFixed inImages
pamdeb1.1.8-1ubuntu2, 1.1.8-1ubuntu2.2, 1.1.8-3.2ubuntu2, 1.1.8-3.2ubuntu2.1+33 more1.4.0-11ubuntu2.7, 1.5.3-5ubuntu5.6, 1.7.0-5+e5, 1.7.0-5ubuntu3.12,267
pamrpm1.1.8-22.el7, 1.1.8-23.el7, 1.3.0-150000.6.86.1, 1.3.0-lp151.7.38+29 more0:1.1.8-23.el7_9.3, 0:1.3.1-40.el8_10, 0:1.5.1-27.el9_8.1, 0:1.5.1-28.el9_8.1+4 more177
OSV records
DEBIAN-CVE-2026-54411RHSA-2026:56131RHSA-2026:59379RHSA-2026:60224RHSA-2026:61227RHSA-2026:64815RLSA-2026:56131RLSA-2026:59379RLSA-2026:64815UBUNTU-CVE-2026-54411ECHO-a8ba-b20f-6ddaopenSUSE-SU-2026:11201-1SUSE-SU-2026:22639-1SUSE-SU-2026:3163-1
Also known as
RHSA-2026:61223, RHSA-2026:61224, RHSA-2026:61225, RHSA-2026:61226, RHSA-2026:61228, RHSA-2026:61230, USN-8601-1

Charts affected

2,428 by stars
ChartLatestAffected imagesRadar Score
quarterdeckrotationalVerified publisher0.16.01 of 1See more

quarterdeck rotational 0.16.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
rotationalio/quarterdeck:0.16.00e7ad3a031dc
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

1,193
routehub-serverroutehub-helm1.0.12 of 3See more

routehub-server routehub-helm 1.0.1

2 of the 3 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
eqalpha/keydb:latest6537505c4235
pam@1.3.1-5ubuntu4.6
no fix listed
library/postgres:latest4ef4dbc939d6
pam@1.7.0-5
no fix listed

Open the chart page →

7,023
agentdatarss30.1.01 of 1See more

agentdata rss3 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

3,597
noderss30.7.21 of 3See more

node rss3 0.7.2

1 of the 3 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

4,804
prepull-daemonsetrstudioVerified publisher0.0.51 of 2See more

prepull-daemonset rstudio 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/ubuntu:bionic152dc042452c
pam@1.1.8-3.6ubuntu2.18.04.6
no fix listed

Open the chart page →

1,740
checkmkrtomik-helm-chartsVerified publisher0.1.01 of 1See more

checkmk rtomik-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
checkmk/check-mk-community:2.5.0p6c11b422210c4
pam@1.4.0-11ubuntu2.6
1.4.0-11ubuntu2.7

Open the chart page →

7,820
paperless-ngxrtomik-helm-chartsVerified publisher0.0.51 of 1See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
pam@1.7.0-5
no fix listed

Open the chart page →

10,845
flaresolverrrubxkubeVerified publisher0.1.11 of 1See more

flaresolverr rubxkube 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

27,938
jellyfinrubxkubeVerified publisher1.3.11 of 1See more

jellyfin rubxkube 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
pam@1.7.0-5
no fix listed

Open the chart page →

2,672
joplinrubxkubeVerified publisher1.3.11 of 2See more

joplin rubxkube 1.3.1

1 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.2.0-debian-12-r2e6fa49bb0347
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

7,518
linkdingrubxkubeVerified publisher1.2.41 of 1See more

linkding rubxkube 1.2.4

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.47.0e35cb50e0581
pam@1.7.0-5
no fix listed

Open the chart page →

2,101
simple-coffeerubxkubeVerified publisher0.1.01 of 1See more

simple-coffee rubxkube 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
qjoly/kubernetes-coffee-image:simpleec94d3bdc035
pam@1.7.0-5
no fix listed

Open the chart page →

2,596
stirling-pdfrubxkubeVerified publisher0.1.21 of 1See more

stirling-pdf rubxkube 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
pam@1.5.3-5ubuntu5.5
1.5.3-5ubuntu5.6

Open the chart page →

6,346
trmnl-serverrubxkubeVerified publisher0.1.01 of 2See more

trmnl-server rubxkube 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/python:3.14-slimcad9a2c87176
pam@1.7.0-5
no fix listed

Open the chart page →

2,959
uptime-kumarubxkubeVerified publisher1.2.11 of 1See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.4.091e963bfda56
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

30,899
vaultwardenrubxkubeVerified publisher1.2.41 of 1See more

vaultwarden rubxkube 1.2.4

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.2094b5689ed81
pam@1.7.0-5
no fix listed

Open the chart page →

1,792
your-spotifyrubxkubeVerified publisher1.0.11 of 3See more

your-spotify rubxkube 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:latestb0652af9c8d0
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

5,476
runwhen-localrunwhen-contribVerified publisher0.6.171 of 3See more

runwhen-local runwhen-contrib 0.6.17

1 of the 3 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
ghcr.io/runwhen-contrib/runwhen-local:0.12.0533ce58c6e02
pam@1.7.0-5
no fix listed

Open the chart page →

3,842
rybbitrybbit-helm1.3.21 of 7See more

rybbit rybbit-helm 1.3.2

1 of the 7 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
valkey/valkey:9.1.164e361b630ec
pam@1.7.0-5
no fix listed

Open the chart page →

6,225
nadekobotryuunosukeds30.1.21 of 2See more

nadekobot ryuunosukeds3 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
pam@1.4.0-11ubuntu2.5
1.4.0-11ubuntu2.7

Open the chart page →

8,822
orbitalryuunosukeds30.2.01 of 1See more

orbital ryuunosukeds3 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
ryuunosukeds3/orbital:latest0879f7261b10
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

2,706
transmissionryuunosukeds31.6.21 of 2See more

transmission ryuunosukeds3 1.6.2

1 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/python:3.9da5aee29682d
pam@1.7.0-5
no fix listed

Open the chart page →

9,879
vrisingryuunosukeds30.1.01 of 1See more

vrising ryuunosukeds3 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
trueosiris/vrising:latest9356f98ad561
pam@1.4.0-11ubuntu2.6
1.4.0-11ubuntu2.7

Open the chart page →

7,496
test-helm-app1saam-helm-test0.1.01 of 1See more

test-helm-app1 saam-helm-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
hamidyousefi93/saam-test:latestc34f071f6ed0
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

3,957
hivechart-1sabryp3-charts0.2.01 of 2See more

hivechart-1 sabryp3-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
valkey/valkey:latestc123e3715db6
pam@1.7.0-5
no fix listed

Open the chart page →

861
safe-config-servicesafe-global0.1.01 of 3See more

safe-config-service safe-global 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
safeglobal/safe-config-service:latest09a5e495c219
pam@1.7.0-5
no fix listed

Open the chart page →

1,637
safe-stacksafe-global0.1.03 of 9See more

safe-stack safe-global 0.1.0

3 of the 9 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
pam@1.5.2-6
no fix listed
safeglobal/safe-config-service:latest09a5e495c219
pam@1.7.0-5
no fix listed
safeglobal/safe-transaction-service:latest80db836cc5d5
pam@1.7.0-5
no fix listed

Open the chart page →

19,929
safe-transaction-servicesafe-global0.1.02 of 6See more

safe-transaction-service safe-global 0.1.0

2 of the 6 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
pam@1.5.2-6
no fix listed
safeglobal/safe-transaction-service:latest80db836cc5d5
pam@1.7.0-5
no fix listed

Open the chart page →

16,923
sagawisesagawiseVerified publisher0.1.01 of 3See more

sagawise sagawise 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
venturenox/redis:latest83b471c193ba
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

4,395
fmtok8s-conference-chartsalaboy0.1.41 of 6See more

fmtok8s-conference-chart salaboy 0.1.4

1 of the 6 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
pam@1.4.0-11ubuntu2
1.4.0-11ubuntu2.7

Open the chart page →

16,312
fmtok8s-frontendsalaboy0.1.31 of 1See more

fmtok8s-frontend salaboy 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
pam@1.4.0-11ubuntu2
1.4.0-11ubuntu2.7

Open the chart page →

8,165
pagessamanvithkaranth1.0.02 of 3See more

pages samanvithkaranth 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
pam@1.3.1-5ubuntu4.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
pam@1.1.8-3.6ubuntu2.18.04.1
no fix listed

Open the chart page →

20,285
evsantisbon0.2.02 of 5See more

ev santisbon 0.2.0

2 of the 5 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
santisbon/evwatcher:latestc4e994ca4540
pam@1.5.2-6
no fix listed
santisbon/evworker:lateste807283f8d69
pam@1.5.2-6
no fix listed

Open the chart page →

14,532
speedtestsantisbon0.1.02 of 3See more

speedtest santisbon 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/influxdb:2.7b8d940ca9376
pam@1.5.2-6+deb12u2
no fix listed
santisbon/speedtest:latest8ee3a1697227
pam@1.5.2-6
no fix listed

Open the chart page →

12,923
pagessarubits-pages1.0.02 of 3See more

pages sarubits-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
pam@1.3.1-5ubuntu4.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
pam@1.1.8-3.6ubuntu2.18.04.1
no fix listed

Open the chart page →

20,285
airflowsb-helm-charts0.3.01 of 1See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
apache/airflow:2.8.1e5560ad0b86e
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

10,308
jellyfinsb-helm-charts0.4.01 of 1See more

jellyfin sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.10.317c3a8d9dddb
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

4,179
mlflowsb-helm-charts0.3.01 of 1See more

mlflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/python:3.11-slim9534e5a8e315
pam@1.7.0-5
no fix listed

Open the chart page →

942
mongodbsb-helm-charts0.4.01 of 1See more

mongodb sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/mongo:7.0.140032d2ca20db
pam@1.4.0-11ubuntu2.4
1.4.0-11ubuntu2.7

Open the chart page →

4,118
nextcloudsb-helm-charts0.4.01 of 2See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/nextcloud:31.0.10-apacheb7faa1653c39
pam@1.7.0-5
no fix listed

Open the chart page →

10,002
phpmyadminsb-helm-charts0.3.01 of 1See more

phpmyadmin sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.16e75aa8f767c
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

5,455
postgresqlsb-helm-charts0.4.01 of 1See more

postgresql sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/postgres:16.11468e1f126ca5
pam@1.7.0-5
no fix listed

Open the chart page →

2,448
promtailsb-helm-charts0.4.01 of 1See more

promtail sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
grafana/promtail:3.6.18dcfdf466da0
pam@1.5.3-5ubuntu5.5
1.5.3-5ubuntu5.6

Open the chart page →

2,295
rsshubsb-helm-charts0.3.01 of 1See more

rsshub sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
diygod/rsshub:2025-11-097a6312cac0d5
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

4,756
vaultwardensb-helm-charts0.4.01 of 1See more

vaultwarden sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
vaultwarden/server:1.34.384fd8a47f58d
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

3,372
wordpresssb-helm-charts0.4.02 of 2See more

wordpress sb-helm-charts 0.4.0

2 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/mysql:8.0-debian9382e4f6f7f0
pam@1.5.2-6+deb12u2
no fix listed
library/wordpress:6.4.3-apache8ae66efb09a2
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

13,781
postgresscalified-postgresVerified publisher18.4.01 of 1See more

postgres scalified-postgres 18.4.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
pam@1.7.0-5
no fix listed

Open the chart page →

1,734
redisscalified-redisVerified publisher0.0.11See more

redis scalified-redis 0.0.1

1 container image this version deploys carries CVE-2026-54411.

Container imageDigestPackageFixed in
library/redis:8.10.18a1efc5f4795
pam@1.7.0-5
no fix listed

Open the chart page →

—
factorioschichtelVerified publisher0.1.11 of 1See more

factorio schichtel 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
factoriotools/factorio:2.0.67-rootlessf7909f7361d6
pam@1.7.0-5
no fix listed

Open the chart page →

3,021
mindustryschichtelVerified publisher0.1.11 of 1See more

mindustry schichtel 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
pschichtel/mindustry-server:v145.1b543e9c2d371
pam@1.4.0-11ubuntu2.4
1.4.0-11ubuntu2.7

Open the chart page →

3,290

Container images carrying it

2,444 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

No deployed image carries CVE-2026-54411.

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.