StackRadar

CVE-2026-54411

High

Advisory

Published 14 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
0.003
25th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,470
of 17,828 indexed, latest versions
Container images
2,505
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: pam security update

Carried by container images the latest versions of 2,470 of 17,828 indexed charts deploy, on 2,505 images.

Affected packageAffected versionsFixed inImages
pamdeb1.1.8-1ubuntu2, 1.1.8-1ubuntu2.2, 1.1.8-3.2ubuntu2, 1.1.8-3.2ubuntu2.1+33 more1.4.0-11ubuntu2.7, 1.5.3-5ubuntu5.6, 1.7.0-5+e5, 1.7.0-5ubuntu3.12,325
pamrpm1.1.8-22.el7, 1.1.8-23.el7, 1.3.0-150000.6.86.1, 1.3.0-lp151.7.38+29 more0:1.1.8-23.el7_9.3, 0:1.3.1-40.el8_10, 0:1.5.1-27.el9_8.1, 0:1.5.1-28.el9_8.1+4 more180
OSV records
DEBIAN-CVE-2026-54411RHSA-2026:56131RHSA-2026:59379RHSA-2026:60224RHSA-2026:61227RHSA-2026:64815RLSA-2026:56131RLSA-2026:59379RLSA-2026:64815UBUNTU-CVE-2026-54411ECHO-a8ba-b20f-6ddaopenSUSE-SU-2026:11201-1SUSE-SU-2026:22639-1SUSE-SU-2026:3163-1
Also known as
RHSA-2026:61223, RHSA-2026:61224, RHSA-2026:61225, RHSA-2026:61226, RHSA-2026:61228, RHSA-2026:61230, USN-8601-1

Charts affected

2,470 by stars
ChartLatestAffected imagesRadar Score
rpc-routerchronicleVerified publisher0.2.91 of 1See more

rpc-router chronicle 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
drpcorg/dshackle:0.54.08858fae1859d
pam@1.4.0-11ubuntu2.3
1.4.0-11ubuntu2.7

Open the chart page →

6,641
tor-proxychronicleVerified publisher0.1.01 of 1See more

tor-proxy chronicle 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
btcpayserver/tor:0.4.8.10e9585b68dc6b
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

3,381
zksyncchronicleVerified publisher0.1.02 of 2See more

zksync chronicle 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/postgres:14156f0b253fd6
pam@1.7.0-5
no fix listed
matterlabs/external-node:v24.0.06cbfea4c694a
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

6,105
kamaji-etcdclastixVerified publisher0.18.01 of 4See more

kamaji-etcd clastix 0.18.0

1 of the 4 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
cfssl/cfssl:latestc9018c2ddf0b
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

12,121
helmchartclouddrove1.4.01 of 1See more

helmchart clouddrove 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pam@1.7.0-5
no fix listed

Open the chart page →

1,965
kube-acp-stackcloudentity2.28.02 of 7See more

kube-acp-stack cloudentity 2.28.0

2 of the 7 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
bitnamilegacy/redis-cluster:7.4.3-debian-12-r0a53d023fdfaf
pam@1.5.2-6+deb12u1
no fix listed
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
pam@1.4.0-11ubuntu2.5
1.4.0-11ubuntu2.7

Open the chart page →

21,138
bitcoindcloudnativeapp0.2.11 of 2See more

bitcoind cloudnativeapp 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
arilot/docker-bitcoind:0.17.127a4f7e0f9f1
pam@1.1.8-3.2ubuntu2.1
no fix listed

Open the chart page →

5,096
daskcloudnativeapp2.2.11 of 2See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
daskdev/dask-notebook:1.1.0052630f5ca04
pam@1.1.8-3.6ubuntu2
no fix listed

Open the chart page →

30,025
distributed-tensorflowcloudnativeapp0.1.11 of 1See more

distributed-tensorflow cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
cheyang/distributed-tf:1.6.046cc34755493
pam@1.1.8-3.2ubuntu2
no fix listed

Open the chart page →

93,202
ethereumcloudnativeapp1.0.01 of 3See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
pam@1.1.8-3.2ubuntu2
no fix listed

Open the chart page →

84,767
guestbookcloudnativeapp0.2.01 of 3See more

guestbook cloudnativeapp 0.2.0

1 of the 3 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
resouer/redis-slave:v2e2f198b49ba7
pam@1.1.8-1ubuntu2
no fix listed

Open the chart page →

89,127
hlf-couchdbcloudnativeapp1.0.61 of 1See more

hlf-couchdb cloudnativeapp 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
hyperledger/fabric-couchdb:0.4.10c65891b6c237
pam@1.1.8-3.2ubuntu2.1
no fix listed

Open the chart page →

90,069
hlf-ordcloudnativeapp1.2.51 of 1See more

hlf-ord cloudnativeapp 1.2.5

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
hyperledger/fabric-orderer:1.3.06ee1abcfd840
pam@1.1.8-3.2ubuntu2.1
no fix listed

Open the chart page →

5,386
hlf-peercloudnativeapp1.2.61 of 1See more

hlf-peer cloudnativeapp 1.2.6

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
hyperledger/fabric-peer:1.3.06756c7c48234
pam@1.1.8-3.2ubuntu2.1
no fix listed

Open the chart page →

5,386
mongodb-replicasetcloudnativeapp3.9.41 of 3See more

mongodb-replicaset cloudnativeapp 3.9.4

1 of the 3 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/mongo:3.6146c1fd999a6
pam@1.1.8-3.2ubuntu2.3
no fix listed

Open the chart page →

4,416
postgresqlcloudnativeapp5.0.01 of 2See more

postgresql cloudnativeapp 5.0.0

1 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
bitnami/minideb:latestab4d5b45116e
pam@1.7.0-5
no fix listed

Open the chart page →

858
risk-advisorcloudnativeapp2.0.41 of 1See more

risk-advisor cloudnativeapp 2.0.4

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
pposkrobko/risk-advisor:v1.0.0eaf260341dba
pam@1.1.8-3.2ubuntu2
no fix listed

Open the chart page →

5,067
rundeckcloudnativeapp0.1.02 of 2See more

rundeck cloudnativeapp 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
pam@1.7.0-5
no fix listed
rundeck/rundeck:3.0.16b13e8059ad72
pam@1.1.8-3.2ubuntu2.1
no fix listed

Open the chart page →

23,854
seleniumcloudnativeapp1.0.81 of 1See more

selenium cloudnativeapp 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
pam@1.3.1-5ubuntu4.1
no fix listed

Open the chart page →

11,923
seqcloudnativeapp1.0.01 of 1See more

seq cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
datalust/seq:5.0.832-pre9c731bb207a6
pam@1.1.8-3.2ubuntu2
no fix listed

Open the chart page →

10,571
spark-history-servercloudnativeapp1.0.01 of 3See more

spark-history-server cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
lightbend/curl:7.47.0b0c9894ac8dd
pam@1.1.8-3.2ubuntu2.1
no fix listed

Open the chart page →

14,110
unificloudnativeapp0.4.21 of 1See more

unifi cloudnativeapp 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
jacobalberty/unifi:5.10.19c409924e2463
pam@1.1.8-3.2ubuntu2.1
no fix listed

Open the chart page →

22,938
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
pam@1.1.8-3.2ubuntu2
no fix listed

Open the chart page →

135,480
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
pam@1.3.1-25.el8
0:1.3.1-40.el8_10

Open the chart page →

25,544
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
pam@1.3.1-8.el8
0:1.3.1-40.el8_10

Open the chart page →

25,892
robot-shopcloud-native-toolkit1.1.11 of 12See more

robot-shop cloud-native-toolkit 1.1.1

1 of the 12 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
robotshop/rs-mongodb:latest119b545823cd
pam@1.3.1-5ubuntu4.2
no fix listed

Open the chart page →

29,649
phpmyadmincloudpirates-phpmyadmin0.1.01 of 1See more

phpmyadmin cloudpirates-phpmyadmin 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apacheadc486045303
pam@1.7.0-5
no fix listed

Open the chart page →

2,238
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad2 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

2 of the 6 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
pam@1.5.2-6+deb12u1
no fix listed
ghcr.io/formancehq/membership:v1.11.024a0113d5fb0
pam@1.4.0-11ubuntu2.6
1.4.0-11ubuntu2.7

Open the chart page →

18,493
cloudlaunchcloudve0.6.01 of 5See more

cloudlaunch cloudve 0.6.0

1 of the 5 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
pam@1.3.1-5ubuntu4.3
no fix listed

Open the chart page →

12,606
cloudlaunch-servercloudve0.2.02 of 5See more

cloudlaunch-server cloudve 0.2.0

2 of the 5 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
bitnami/minideb:latestab4d5b45116e
pam@1.7.0-5
no fix listed
cloudve/cloudlaunch-server:latest4a3d7fae90bb
pam@1.3.1-5ubuntu4.3
no fix listed

Open the chart page →

12,322
cloudlaunchservercloudve0.6.01 of 4See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
pam@1.3.1-5ubuntu4.3
no fix listed

Open the chart page →

11,732
galaxycloudve6.8.81 of 3See more

galaxy cloudve 6.8.8

1 of the 3 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
pam@1.7.0-5
no fix listed

Open the chart page →

5,648
galaxy-depscloudve1.1.11 of 7See more

galaxy-deps cloudve 1.1.1

1 of the 7 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:latestcd354d5b2556
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

10,639
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
pam@1.3.1-5ubuntu4.3
no fix listed

Open the chart page →

16,231
galaxy-stablecloudve2.0.02 of 5See more

galaxy-stable cloudve 2.0.0

2 of the 5 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
pam@1.1.8-1ubuntu2.2
no fix listed
galaxy/galaxy-stable:v18.018e577a626dfd
pam@1.1.8-1ubuntu2.2
no fix listed

Open the chart page →

165,117
janisterminalcloudve0.1.01 of 2See more

janisterminal cloudve 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
cloudve/janis-terminal:latestaf56e77ca587
pam@1.1.8-3.6ubuntu2.18.04.1
no fix listed

Open the chart page →

78,223
postgresqlcloudve4.0.01 of 2See more

postgresql cloudve 4.0.0

1 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
bitnami/minideb:latest835e5f8392c3
pam@1.7.0-5
no fix listed

Open the chart page →

858
pulsarcloudve0.2.01 of 2See more

pulsar cloudve 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

6,231
terminalmancloudve0.3.41 of 1See more

terminalman cloudve 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
cloudve/ttyd:latestd79c1c5881c0
pam@1.1.8-3.6ubuntu2.18.04.1
no fix listed

Open the chart page →

13,236
authentikcluster-deploy0.2.01 of 1See more

authentik cluster-deploy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.5.6ed120caf710c
pam@1.7.0-5
no fix listed

Open the chart page →

2,566
chowdacluster-deploy0.2.01 of 1See more

chowda cluster-deploy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/chowda:main86ab9effd1a5
pam@1.7.0-5
no fix listed

Open the chart page →

1,885
metaflowcluster-deploy0.2.21 of 1See more

metaflow cluster-deploy 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

8,210
pbcore-utilcluster-deploy0.0.11 of 1See more

pbcore-util cluster-deploy 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

9,380
clusterfactoryclusterfactory0.2.01 of 5See more

clusterfactory clusterfactory 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
jenkins/jenkins:2.541.3-jdk21c4098086090c
pam@1.7.0-5
no fix listed

Open the chart page →

7,245
gitea-jenkinsclusterfactory0.1.11 of 5See more

gitea-jenkins clusterfactory 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
jenkins/jenkins:2.541.3-jdk21c4098086090c
pam@1.7.0-5
no fix listed

Open the chart page →

7,034
clusterplexclusterplexVerified publisher1.1.101 of 3See more

clusterplex clusterplex 1.1.10

1 of the 3 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
ghcr.io/pabloromeo/clusterplex_orchestrator:1.4.160fe80de2d22c
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

3,785
web-chartcms-ktcloudlab0.1.01 of 1See more

web-chart cms-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pam@1.7.0-5
no fix listed

Open the chart page →

1,965
appcnapVerified publisher1.2.01 of 1See more

app cnap 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
pam@1.7.0-5
no fix listed

Open the chart page →

1,589
castlemockcnieg2.0.11 of 1See more

castlemock cnieg 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
castlemock/castlemock:latestb7f3f1527ba9
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.6

Open the chart page →

4,736
door-agentcnoVerified publisher3.0.151 of 15See more

door-agent cno 3.0.15

1 of the 15 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.31.02bf7f042e396
pam@1.4.0-11ubuntu2.4
1.4.0-11ubuntu2.7

Open the chart page →

19,831

Container images carrying it

2,505 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
pam@1.5.2-6+deb12u1
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
pam@1.5.2-6+deb12u1
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
pam@1.5.2-6+deb12u2
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
pam@1.5.2-6+deb12u2
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
pam@1.5.2-6+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 22 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.