StackRadar

CVE-2026-54411

High

Advisory

Published 14 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
0.003
25th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,470
of 17,828 indexed, latest versions
Container images
2,505
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: pam security update

Carried by container images the latest versions of 2,470 of 17,828 indexed charts deploy, on 2,505 images.

Affected packageAffected versionsFixed inImages
pamdeb1.1.8-1ubuntu2, 1.1.8-1ubuntu2.2, 1.1.8-3.2ubuntu2, 1.1.8-3.2ubuntu2.1+33 more1.4.0-11ubuntu2.7, 1.5.3-5ubuntu5.6, 1.7.0-5+e5, 1.7.0-5ubuntu3.12,325
pamrpm1.1.8-22.el7, 1.1.8-23.el7, 1.3.0-150000.6.86.1, 1.3.0-lp151.7.38+29 more0:1.1.8-23.el7_9.3, 0:1.3.1-40.el8_10, 0:1.5.1-27.el9_8.1, 0:1.5.1-28.el9_8.1+4 more180
OSV records
DEBIAN-CVE-2026-54411RHSA-2026:56131RHSA-2026:59379RHSA-2026:60224RHSA-2026:61227RHSA-2026:64815RLSA-2026:56131RLSA-2026:59379RLSA-2026:64815UBUNTU-CVE-2026-54411ECHO-a8ba-b20f-6ddaopenSUSE-SU-2026:11201-1SUSE-SU-2026:22639-1SUSE-SU-2026:3163-1
Also known as
RHSA-2026:61223, RHSA-2026:61224, RHSA-2026:61225, RHSA-2026:61226, RHSA-2026:61228, RHSA-2026:61230, USN-8601-1

Charts affected

2,470 by stars
ChartLatestAffected imagesRadar Score
helm-chart-testdasmeta0.1.41 of 1See more

helm-chart-test dasmeta 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/nginx:stable0aa2d81d65bc
pam@1.7.0-5
no fix listed

Open the chart page →

1,589
mongodb-bi-connectordasmeta1.0.31 of 1See more

mongodb-bi-connector dasmeta 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
dasmeta/mongodb-bi-connector:1.0.3fa657960dfec
pam@1.1.8-3.6ubuntu2.18.04.4
no fix listed

Open the chart page →

5,884
pgcatdasmeta0.1.31 of 2See more

pgcat dasmeta 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
ghcr.io/postgresml/pgcat:v1.2.0627761f6dcbc
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

3,193
proxysqldasmeta1.2.31 of 1See more

proxysql dasmeta 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
proxysql/proxysql:2.7.3a4d6c35c2949
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

2,928
redashdasmeta0.1.01 of 1See more

redash dasmeta 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
redash/redash:26.3.0c5c9148f5c38
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

5,244
sentry-relaydasmeta0.1.21 of 1See more

sentry-relay dasmeta 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
getsentry/relay:24.10.0ba7bf9163219
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

3,622
monitoring-stackdata354-helmVerified publisher1.4.21 of 4See more

monitoring-stack data354-helm 1.4.2

1 of the 4 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
grafana/fluent-plugin-loki:latest4f0438bdebb5
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

3,046
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
pam@1.1.8-3.6ubuntu2.18.04.1
no fix listed

Open the chart page →

95,368
datacube-dashboarddatacube-charts0.5.101 of 2See more

datacube-dashboard datacube-charts 0.5.10

1 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/postgres:latest86c951e05bf5
pam@1.7.0-5
no fix listed

Open the chart page →

1,268
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
pam@1.1.8-3.6ubuntu2.18.04.1
no fix listed

Open the chart page →

82,350
datacube-indexdatacube-charts0.4.41 of 2See more

datacube-index datacube-charts 0.4.4

1 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.6

Open the chart page →

6,259
datacube-owsdatacube-charts0.20.11 of 1See more

datacube-ows datacube-charts 0.20.1

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.6

Open the chart page →

6,110
datacube-processingdatacube-charts0.1.11 of 2See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
opendatacube/pipelines:wofs-1.225d810e8504b8
pam@1.1.8-3.6ubuntu2.18.04.1
no fix listed

Open the chart page →

90,432
datacube-wpsdatacube-charts0.9.01 of 1See more

datacube-wps datacube-charts 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
opendatacube/wps:latest80df355a660b
pam@1.4.0-11ubuntu2.6
1.4.0-11ubuntu2.7

Open the chart page →

6,307
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
pam@1.1.8-3.6ubuntu2.18.04.1
no fix listed

Open the chart page →

91,990
private-action-runnerdatadogVerified publisher1.28.11 of 1See more

private-action-runner datadog 1.28.1

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
gcr.io/datadoghq/private-action-runner:v1.21.05f5918f843a4
pam@1.5.3-5ubuntu5.5
1.5.3-5ubuntu5.6

Open the chart page →

2,213
eg-edge-stackdatawire0.0.11 of 7See more

eg-edge-stack datawire 0.0.1

1 of the 7 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
pam@1.1.8-3.6ubuntu2.18.04.1
no fix listed

Open the chart page →

79,480
pagesdavid-pages1.0.02 of 3See more

pages david-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
pam@1.3.1-5ubuntu4.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
pam@1.1.8-3.6ubuntu2.18.04.1
no fix listed

Open the chart page →

20,350
db-connection-testdb-connection-testVerified publisher0.1.01 of 1See more

db-connection-test db-connection-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
felipecs8/app-db-connection-test:v129e06c9c6385
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

10,105
dbgatedbgate-helm-chartVerified publisher0.1.81 of 1See more

dbgate dbgate-helm-chart 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
dbgate/dbgate:7.2.3f2dc7423ea88
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

1,444
pagesdebasish-pages1.0.02 of 3See more

pages debasish-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
pam@1.3.1-5ubuntu4.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
pam@1.1.8-3.6ubuntu2.18.04.1
no fix listed

Open the chart page →

20,350
decisionrules-ocpdecisionrules-ocpVerified publisher0.1.01 of 4See more

decisionrules-ocp decisionrules-ocp 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
decisionrules/ai-engine:latest557dea1373aa
pam@1.7.0-5
no fix listed

Open the chart page →

1,371
defactopsdefactops1.0.91 of 2See more

defactops defactops 1.0.9

1 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
defactops/defactops-backend:1.0.2307b663c0092a
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

4,576
airtraildefault-ghVerified publisher0.2.21 of 2See more

airtrail default-gh 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
johly/airtrail:v3.11.19f702b91e0e7
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

1,526
intel-gpu-exporterdefault-ghVerified publisher0.1.01 of 1See more

intel-gpu-exporter default-gh 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
pam@1.4.0-11ubuntu2.3
1.4.0-11ubuntu2.7

Open the chart page →

4,919
defguard-gatewaydefguard2.1.01 of 1See more

defguard-gateway defguard 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
ghcr.io/defguard/gateway:2.1.0738b2b6f413b
pam@1.7.0-5
no fix listed

Open the chart page →

997
defguard-proxydefguard2.1.01 of 1See more

defguard-proxy defguard 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
ghcr.io/defguard/defguard-proxy:2.1.08765a28e383e
pam@1.7.0-5
no fix listed

Open the chart page →

858
csi-driver-smbdeimosfr-charts1.20.31 of 5See more

csi-driver-smb deimosfr-charts 1.20.3

1 of the 5 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

3,027
linkdingdeimosfr-charts1.0.31 of 1See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.35.00c5dddf0b37c
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

6,214
technitiumdeimosfr-charts15.4.01 of 1See more

technitium deimosfr-charts 15.4.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
technitium/dns-server:15.4.0df7d90ef0f7b
pam@1.5.3-5ubuntu5.5
1.5.3-5ubuntu5.6

Open the chart page →

1,429
supersetdeliveryheroVerified publisher1.1.31 of 1See more

superset deliveryhero 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

2,355
dell-fan-controllerdell-fan-controllerVerified publisher1.0.71 of 1See more

dell-fan-controller dell-fan-controller 1.0.7

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
ghcr.io/alexmorbo/dell_idrac_fan_controller:v0.1.6-1d110504d551d
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.6

Open the chart page →

2,610
dellhw_exporterdellhw-exporterVerified publisher1.0.11 of 1See more

dellhw_exporter dellhw-exporter 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
quay.io/galexrt/dellhw_exporter:v2.0.0-rc.18a1361fa38c1
pam@1.5.1-19.el9
0:1.5.1-28.el9_8.1

Open the chart page →

3,345
prometheus-dellhw-exporterdellhw-exporterVerified publisher1.3.01 of 1See more

prometheus-dellhw-exporter dellhw-exporter 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
quay.io/galexrt/dellhw_exporter:v2.0.0b3a5806d73b5
pam@1.5.1-26.el9_6
0:1.5.1-28.el9_8.1

Open the chart page →

1,902
my-helm-chartdemohelm20.1.01 of 1See more

my-helm-chart demohelm2 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pam@1.7.0-5
no fix listed

Open the chart page →

1,965
challengedeneme0.1.02 of 2See more

challenge deneme 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/postgres:latest86c951e05bf5
pam@1.7.0-5
no fix listed
library/redis:6e7b96daa9a18
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

2,314
deploy-elibrarydeploy-elibrary-helm0.1.01 of 1See more

deploy-elibrary deploy-elibrary-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
psorab/elibrary:latest53b68896c4ce
pam@1.3.1-5ubuntu4.6
no fix listed

Open the chart page →

7,321
deploy-elibrarydeploy-elibrary-oo0.1.01 of 1See more

deploy-elibrary deploy-elibrary-oo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
jedi132000/nextapp:latestdc2a81e92f23
pam@1.3.1-5ubuntu4.3
no fix listed

Open the chart page →

8,217
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
pam@1.3.1-5ubuntu4.6
no fix listed

Open the chart page →

74,328
apachedevops0.1.02 of 4See more

apache devops 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/mariadb:10.8.30abf60f81588
pam@1.4.0-11ubuntu2
1.4.0-11ubuntu2.7
ghcr.io/codingducksrl/laravel:8.15be52524664c
pam@1.4.0-11ubuntu2
1.4.0-11ubuntu2.7

Open the chart page →

114,508
laraveldevops0.10.32 of 4See more

laravel devops 0.10.3

2 of the 4 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/mariadb:10.9.4fbb8456ebdb1
pam@1.4.0-11ubuntu2.1
1.4.0-11ubuntu2.7
ghcr.io/codingducksrl/laravel:8.15be52524664c
pam@1.4.0-11ubuntu2
1.4.0-11ubuntu2.7

Open the chart page →

113,508
wordpressdevops0.12.01 of 4See more

wordpress devops 0.12.0

1 of the 4 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/mariadb:10.8.30abf60f81588
pam@1.4.0-11ubuntu2
1.4.0-11ubuntu2.7

Open the chart page →

13,103
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

9,750
argocd-certificate-refreshdevtron0.10.81 of 1See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
pam@1.4.0-11ubuntu2
1.4.0-11ubuntu2.7

Open the chart page →

13,239
calertdevtron0.0.11 of 1See more

calert devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
quay.io/devtron/google-chat-alert-manager:v2.0.239f2c6e0af38
pam@1.3.1-5ubuntu4.3
no fix listed

Open the chart page →

4,733
devtron-enterprisedevtron48.0.08 of 28See more

devtron-enterprise devtron 48.0.0

8 of the 28 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
quay.io/devtron/casbin:172ef62b-9450794d-464-394225bf041aacadd
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.6
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.6
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.6
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
pam@1.5.2-6+deb12u1
no fix listed
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
pam@1.1.8-3.2ubuntu2.3
no fix listed
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.6
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
pam@1.5.2-6+deb12u1
no fix listed
quay.io/devtron/postgres:14.91b594392f7cb
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

69,736
devtron-logs-dumpdevtron0.1.01 of 1See more

devtron-logs-dump devtron 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
pam@1.4.0-11ubuntu2.3
1.4.0-11ubuntu2.7

Open the chart page →

5,015
dgraphdevtron0.0.201 of 1See more

dgraph devtron 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
pam@1.3.1-5ubuntu4.1
no fix listed

Open the chart page →

12,033
migration-incluster-cddevtron0.10.01 of 1See more

migration-incluster-cd devtron 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

3,959
ai-agentdevtron-labs0.0.11 of 1See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

9,750

Container images carrying it

2,505 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
pam@1.5.2-6+deb12u1
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
pam@1.5.2-6+deb12u1
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
pam@1.5.2-6+deb12u2
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
pam@1.5.2-6+deb12u2
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
pam@1.5.2-6+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 22 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.