StackRadar

CVE-2026-54411

High

Advisory

Published 14 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
0.003
25th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,464
of 17,837 indexed, latest versions
Container images
2,472
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: pam security update

Carried by container images the latest versions of 2,464 of 17,837 indexed charts deploy, on 2,472 images.

Affected packageAffected versionsFixed inImages
pamdeb1.1.8-1ubuntu2, 1.1.8-1ubuntu2.2, 1.1.8-3.2ubuntu2, 1.1.8-3.2ubuntu2.1+33 more1.4.0-11ubuntu2.7, 1.5.3-5ubuntu5.6, 1.7.0-5+e5, 1.7.0-5ubuntu3.12,293
pamrpm1.1.8-22.el7, 1.1.8-23.el7, 1.3.0-150000.6.86.1, 1.3.0-lp151.7.38+29 more0:1.1.8-23.el7_9.3, 0:1.3.1-40.el8_10, 0:1.5.1-27.el9_8.1, 0:1.5.1-28.el9_8.1+4 more179
OSV records
DEBIAN-CVE-2026-54411RHSA-2026:56131RHSA-2026:59379RHSA-2026:60224RHSA-2026:61227RHSA-2026:64815RLSA-2026:56131RLSA-2026:59379RLSA-2026:64815UBUNTU-CVE-2026-54411ECHO-a8ba-b20f-6ddaopenSUSE-SU-2026:11201-1SUSE-SU-2026:22639-1SUSE-SU-2026:3163-1
Also known as
RHSA-2026:61223, RHSA-2026:61224, RHSA-2026:61225, RHSA-2026:61226, RHSA-2026:61228, RHSA-2026:61230, USN-8601-1

Charts affected

2,464 by stars
ChartLatestAffected imagesRadar Score
logic-ms-helm-chartnotesprojectchart0.1.01 of 2See more

logic-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/postgres:latest86c951e05bf5
pam@1.7.0-5
no fix listed

Open the chart page →

6,940
notes-admin-front-helm-chartnotesprojectchart0.1.01 of 1See more

notes-admin-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
vlebediantsev/notes-admin-front:latest007c6670ff48
pam@1.5.2-6
no fix listed

Open the chart page →

15,398
notes-project-fromt-helm-chartnotesprojectchart0.1.01 of 1See more

notes-project-fromt-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
vlebediantsev/notes-project-front:latest945675fd2636
pam@1.5.2-6
no fix listed

Open the chart page →

15,471
registration-ms-front-helm-chartnotesprojectchart0.1.01 of 1See more

registration-ms-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
pam@1.5.2-6
no fix listed

Open the chart page →

15,469
registration-ms-helm-chartnotesprojectchart0.1.01 of 2See more

registration-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
pam@1.7.0-5
no fix listed

Open the chart page →

6,000
user-data-ms-helm-chartnotesprojectchart0.1.01 of 2See more

user-data-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/postgres:latest86c951e05bf5
pam@1.7.0-5
no fix listed

Open the chart page →

5,956
zookeeper-helm-chartnotesprojectchart0.1.01 of 1See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
pam@1.1.8-1ubuntu2
no fix listed

Open the chart page →

41,506
fluentd-kubernetes-daemonsetnovum-rgi-charts0.1.01 of 1See more

fluentd-kubernetes-daemonset novum-rgi-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
fluent/fluentd-kubernetes-daemonset:v1-debian-graylogfda93f768f98
pam@1.7.0-5
no fix listed

Open the chart page →

1,074
nexus2novum-rgi-charts0.1.11 of 1See more

nexus2 novum-rgi-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
sonatype/nexus:oss6bc88b51d4d7
pam@1.1.8-23.el7
0:1.1.8-23.el7_9.3

Open the chart page →

3,251
example-dev-toolsnoygal0.2.82 of 3See more

example-dev-tools noygal 0.2.8

2 of the 3 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
linuxserver/cloud9:latest45c5fe102ff3
pam@1.1.8-3.6ubuntu2.18.04.3
no fix listed
linuxserver/codimd:latestb801bbcf6386
pam@1.1.8-3.6ubuntu2.18.04.2
no fix listed

Open the chart page →

27,407
splashntppoolVerified publisher1.0.41 of 1See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
scrapinghub/splash:3.4.1a5f89bc84606
pam@1.1.8-3.6ubuntu2.18.04.1
no fix listed

Open the chart page →

92,675
nutanix-core-files-cluster-operatornutanix-helm-releasesVerified publisher1.1.01 of 1See more

nutanix-core-files-cluster-operator nutanix-helm-releases 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
nutanix/cn-rwx-operator:1.1.00082e0cebd42
pam@1.6.1-9.el10
0:1.6.1-9.el10_2.1

Open the chart page →

345
cloakbrowser-mcpobeoneVerified publisher0.3.11 of 1See more

cloakbrowser-mcp obeone 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
swimmwatch/cloakbrowser-mcp:1.13.0d48c705a58c8
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

2,389
firecrawlobeoneVerified publisher3.0.112See more

firecrawl obeone 3.0.11

2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
ghcr.io/firecrawl/nuq-postgres:latestf9388bd25ae2
pam@1.7.0-5
no fix listed
ghcr.io/firecrawl/playwright-service:latest1f6eba640320
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

—
libretranslateobeoneVerified publisher1.0.71 of 1See more

libretranslate obeone 1.0.7

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
libretranslate/libretranslate:v1.9.61de2d7056bb8
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

2,079
ollamaobeoneVerified publisher0.3.11 of 2See more

ollama obeone 0.3.1

1 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
ghcr.io/obeone/ollama-exporter:latestf43af285c6e0
pam@1.7.0-5
no fix listed

Open the chart page →

1,146
olvid-botobeoneVerified publisher0.3.31 of 1See more

olvid-bot obeone 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
olvid/bot-daemon:2.0.1e0e6b165d879
pam@1.5.3-5ubuntu5.5
1.5.3-5ubuntu5.6

Open the chart page →

2,157
parcelapp-mcpobeoneVerified publisher0.1.01 of 1See more

parcelapp-mcp obeone 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
ghcr.io/obeone/parcelapp-mcp:0.2.17073131db60b
pam@1.7.0-5
no fix listed

Open the chart page →

917
ocellusaiocellusaiVerified publisher0.1.121 of 2See more

ocellusai ocellusai 0.1.12

1 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
quay.io/ocellusai/operator:v0.10.59ff01f642e2b
pam@1.7.0-5
no fix listed

Open the chart page →

1,237
lensoci-ai-incubations0.1.141 of 16See more

lens oci-ai-incubations 0.1.14

1 of the 16 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/postgres:134689940c6838
pam@1.7.0-5
no fix listed

Open the chart page →

17,349
octantisoctantis0.1.01 of 1See more

octantis octantis 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
ghcr.io/vinny1892/octantis:latest45459c0910fc
pam@1.7.0-5
no fix listed

Open the chart page →

2,662
mockoidcoidcmockVerified publisher0.0.11 of 1See more

mockoidc oidcmock 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
marcoimme/oidcmock:latestb6035c0721a8
pam@1.7.0-5
no fix listed

Open the chart page →

2,391
web-chartoje-ktcloudlab0.1.01 of 1See more

web-chart oje-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
pam@1.7.0-5
no fix listed

Open the chart page →

1,623
ojp-serverojp0.1.51 of 1See more

ojp-server ojp 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
rrobetti/ojp:0.1.0-beta1141bd88232b
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.6

Open the chart page →

2,706
automx2oleds-helm-chartsVerified publisher1.0.51 of 1See more

automx2 oleds-helm-charts 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
oled01/automx2:2025.1.105d3e398e675
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

5,451
cmsmsoleds-helm-chartsVerified publisher0.1.61 of 1See more

cmsms oleds-helm-charts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.4.7-debian-12-r290dc6acb7b2e
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

2,934
db-backupoleds-helm-chartsVerified publisher0.1.01 of 1See more

db-backup oleds-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
oled01/db-backup:0.1.06302fd2b5333
pam@1.4.0-11ubuntu2
1.4.0-11ubuntu2.7

Open the chart page →

8,189
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
pam@1.4.0-11ubuntu2.3
1.4.0-11ubuntu2.7

Open the chart page →

9,397
laravel-appoli-the-devVerified publisher2.0.171 of 1See more

laravel-app oli-the-dev 2.0.17

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
serversideup/php:8.5-fpm-nginx8f8c2f010ac5
pam@1.7.0-5
no fix listed

Open the chart page →

2,957
node-appoli-the-devVerified publisher1.0.01 of 1See more

node-app oli-the-dev 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/node:22-bookworm-slim48e4b67d85f8
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

1,170
paperless-ngxoli-the-devVerified publisher1.1.11 of 1See more

paperless-ngx oli-the-dev 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
pam@1.7.0-5
no fix listed

Open the chart page →

4,883
cron-jobonechart-slVerified publisher0.73.71 of 1See more

cron-job onechart-sl 0.73.7

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/debian:stable-slim5bc3287b2540
pam@1.7.0-5
no fix listed

Open the chart page →

602
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.6

Open the chart page →

6,243
ontoserverontoserverVerified publisher0.5.21 of 2See more

ontoserver ontoserver 0.5.2

1 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/postgres:16a3b7f434b2dc
pam@1.7.0-5
no fix listed

Open the chart page →

1,290
onyx-stackonyx0.3.11 of 12See more

onyx-stack onyx 0.3.1

1 of the 12 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
onyxdotapp/onyx-backend:latest60e83a098ae4
pam@1.7.0-5
no fix listed

Open the chart page →

6,665
erigonop-chartsVerified publisher0.0.51 of 2See more

erigon op-charts 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
testinprod/op-erigon:latest0a125bd77a2d
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

2,952
commonground-gatewayopencatalogi1.5.31 of 7See more

commonground-gateway opencatalogi 1.5.3

1 of the 7 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
pam@1.5.2-6
no fix listed

Open the chart page →

9,844
opentickopenchartVerified publisher0.1.01 of 1See more

opentick openchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/nginx:1.25.5a484819eb602
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

5,795
anchore-engineopencloudcx1.13.01 of 2See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.10.0bde9eedf639d
pam@1.3.1-14.el8
0:1.3.1-40.el8_10

Open the chart page →

18,085
bbsimopencord4.8.111 of 1See more

bbsim opencord 4.8.11

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
voltha/bbsim:1.16.7d90403d58016
pam@1.1.8-3.6ubuntu2.18.04.6
no fix listed

Open the chart page →

3,957
bbsim-sadis-serveropencord0.3.51 of 1See more

bbsim-sadis-server opencord 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
voltha/bbsim-sadis-server:0.4.0762b272d439e
pam@1.1.8-3.6ubuntu2.18.04.6
no fix listed

Open the chart page →

3,771
cdn-remoteopencord0.2.42 of 3See more

cdn-remote opencord 0.2.4

2 of the 3 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
pam@1.1.8-3.6ubuntu2.18.04.1
no fix listed
omecproject/cdn-video-repo:1.0.0d59ccb138ffb
pam@1.1.8-3.2ubuntu2.1
no fix listed

Open the chart page →

63,904
comacopencord1.0.03 of 9See more

comac opencord 1.0.0

3 of the 9 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
pam@1.1.8-3.2ubuntu2.1
no fix listed
omecproject/onos-progran:1.0.05715e5648aa0
pam@1.1.8-3.2ubuntu2
no fix listed
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
pam@1.1.8-3.2ubuntu2.1
no fix listed

Open the chart page →

254,818
comac-cuopencord0.1.11 of 4See more

comac-cu opencord 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
ngick8stesting/c3po-mmeinit:latest1e764eab77b4
pam@1.1.8-3.6ubuntu2
no fix listed

Open the chart page →

8,263
comac-platformopencord0.0.171 of 11See more

comac-platform opencord 0.0.17

1 of the 11 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
pam@1.1.8-3.2ubuntu2.1
no fix listed

Open the chart page →

80,960
freeradiusopencord1.0.41 of 1See more

freeradius opencord 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.0.2121c8bfa904d8
pam@1.1.8-3.6ubuntu2.18.04.1
no fix listed

Open the chart page →

15,818
mcord-cdn-remoteopencord0.1.62 of 2See more

mcord-cdn-remote opencord 0.1.6

2 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
pam@1.1.8-3.2ubuntu2.1
no fix listed
woojoong/wowza:latestec230db19652
pam@1.1.8-3.6ubuntu2
no fix listed

Open the chart page →

43,202
mcord-cdn-remote-freeopencord0.1.31 of 1See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
pam@1.1.8-3.2ubuntu2.1
no fix listed

Open the chart page →

29,624
mcord-control-planeopencord0.2.22 of 5See more

mcord-control-plane opencord 0.2.2

2 of the 5 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
ngick8stesting/c3po-mme:mwca-mme-debug8dd6dea45be4
pam@1.1.8-3.2ubuntu2.1
no fix listed
ngick8stesting/c3po-mmeinit:latest1e764eab77b4
pam@1.1.8-3.6ubuntu2
no fix listed

Open the chart page →

16,079
oaisimopencord0.1.72 of 3See more

oaisim opencord 0.1.7

2 of the 3 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
omecproject/lte-softmodem:1.1.0b5ddd36ec20c
pam@1.1.8-3.6ubuntu2.18.04.2
no fix listed
omecproject/lte-uesoftmodem:1.1.0686f8bc37d8c
pam@1.1.8-3.6ubuntu2.18.04.2
no fix listed

Open the chart page →

14,981

Container images carrying it

2,472 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

No deployed image carries CVE-2026-54411.

syft 1.42.1 · advisories as of 23 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.