StackRadar

CVE-2026-54411

High

Advisory

Published 14 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
0.003
25th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,453
of 17,837 indexed, latest versions
Container images
2,457
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: pam security update

Carried by container images the latest versions of 2,453 of 17,837 indexed charts deploy, on 2,457 images.

Affected packageAffected versionsFixed inImages
pamdeb1.1.8-1ubuntu2, 1.1.8-1ubuntu2.2, 1.1.8-3.2ubuntu2, 1.1.8-3.2ubuntu2.1+33 more1.4.0-11ubuntu2.7, 1.5.3-5ubuntu5.6, 1.7.0-5+e5, 1.7.0-5ubuntu3.12,278
pamrpm1.1.8-22.el7, 1.1.8-23.el7, 1.3.0-150000.6.86.1, 1.3.0-lp151.7.38+29 more0:1.1.8-23.el7_9.3, 0:1.3.1-40.el8_10, 0:1.5.1-27.el9_8.1, 0:1.5.1-28.el9_8.1+4 more179
OSV records
DEBIAN-CVE-2026-54411RHSA-2026:56131RHSA-2026:59379RHSA-2026:60224RHSA-2026:61227RHSA-2026:64815RLSA-2026:56131RLSA-2026:59379RLSA-2026:64815UBUNTU-CVE-2026-54411ECHO-a8ba-b20f-6ddaopenSUSE-SU-2026:11201-1SUSE-SU-2026:22639-1SUSE-SU-2026:3163-1
Also known as
RHSA-2026:61223, RHSA-2026:61224, RHSA-2026:61225, RHSA-2026:61226, RHSA-2026:61228, RHSA-2026:61230, USN-8601-1

Charts affected

2,453 by stars
ChartLatestAffected imagesRadar Score
valkeyself-hosters-by-nightVerified publisher0.1.01 of 1See more

valkey self-hosters-by-night 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
valkey/valkey:9.1.164e361b630ec
pam@1.7.0-5
no fix listed

Open the chart page →

881
sentry-dbsentry0.9.41 of 10See more

sentry-db sentry 0.9.4

1 of the 10 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
yandex/clickhouse-server:19.16d210dc69321e
pam@1.1.8-3.6ubuntu2.18.04.1
no fix listed

Open the chart page →

11,343
cortezasergiotocaliniVerified publisher1.0.11 of 1See more

corteza sergiotocalini 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.60bcdcbcd3c63
pam@1.4.0-11ubuntu2.6
1.4.0-11ubuntu2.7

Open the chart page →

3,385
guacamolesergiotocaliniVerified publisher1.0.01 of 2See more

guacamole sergiotocalini 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
guacamole/guacamole:1.5.50f62f6d17ab3
pam@1.4.0-11ubuntu2.4
1.4.0-11ubuntu2.7

Open the chart page →

5,574
miniosergiotocaliniVerified publisher1.0.01 of 1See more

minio sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-07-21T21-12-44Z8e5e9490cd50
pam@1.3.1-25.el8
0:1.3.1-40.el8_10

Open the chart page →

4,361
service-exampleservice-example-10.1.01 of 7See more

service-example service-example-1 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/redis:latest718f745deb7d
pam@1.7.0-5
no fix listed

Open the chart page →

9,198
serviceexampleserviceexample-chart0.3.02 of 4See more

serviceexample serviceexample-chart 0.3.0

2 of the 4 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/redis:latest718f745deb7d
pam@1.7.0-5
no fix listed
tibyandocker/serviceexample:latesta4ad592cea84
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

4,175
serviceexampleservice-example-helm-chart0.1.01 of 4See more

serviceexample service-example-helm-chart 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/redis:latest718f745deb7d
pam@1.7.0-5
no fix listed

Open the chart page →

2,396
service-exampleservice-example-jt0.1.11 of 9See more

service-example service-example-jt 0.1.1

1 of the 9 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
janzo83/serviceexample:latestfb3c4ac36f3e
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

7,619
first-chartshashkist-test0.1.01 of 3See more

first-chart shashkist-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
shashkist/flask-contacts-app:latest581de1fd6084
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

3,133
shopwareshopware-storeVerified publisher2.2.11 of 5See more

shopware shopware-store 2.2.1

1 of the 5 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
valkey/valkey:8640c5e62cea0
pam@1.7.0-5
no fix listed

Open the chart page →

1,782
pagesshrutiujlan-pages1.0.02 of 3See more

pages shrutiujlan-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
pam@1.3.1-5ubuntu4.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
pam@1.1.8-3.6ubuntu2.18.04.1
no fix listed

Open the chart page →

20,372
hedgedocsi-gitops0.12.31 of 2See more

hedgedoc si-gitops 0.12.3

1 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/postgres:18.43a82e1f56c8f
pam@1.7.0-5
no fix listed

Open the chart page →

2,734
postgresqlsignoz0.0.21 of 1See more

postgresql signoz 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/postgres:15dfbbb0ad8cab
pam@1.7.0-5
no fix listed

Open the chart page →

1,290
local-static-provisionersig-storage-local-static-provisioner2.9.01 of 1See more

local-static-provisioner sig-storage-local-static-provisioner 2.9.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

1,306
counter-dhlsikademo0.3.03 of 3See more

counter-dhl sikademo 0.3.0

3 of the 3 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/redis:latest8a1efc5f4795
pam@1.7.0-5
no fix listed
ondrejsika/counter:latestd95eaeee2172
pam@1.7.0-5
no fix listed
ghcr.io/ondrejsika/counter-frontend:latestc4166d2eb8eb
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

4,621
gordy-redissikademo0.1.01 of 1See more

gordy-redis sikademo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/redis:latest718f745deb7d
pam@1.7.0-5
no fix listed

Open the chart page →

602
test-hello-worldsikademo0.1.01 of 1See more

test-hello-world sikademo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
sikalabs/hello-world-server:latest5f49bf889a64
pam@1.7.0-5
no fix listed

Open the chart page →

1,241
hello-worldsikalabs0.17.01 of 1See more

hello-world sikalabs 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
ghcr.io/sikalabs/hello-world-server:latestcf8538bf6489
pam@1.7.0-5
no fix listed

Open the chart page →

1,241
hello-world-examplesikalabs0.1.31 of 1See more

hello-world-example sikalabs 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
sikalabs/hello-world-server:latest5f49bf889a64
pam@1.7.0-5
no fix listed

Open the chart page →

1,241
kubernetes-dashboard-gatewaysikalabs0.1.01 of 1See more

kubernetes-dashboard-gateway sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
pam@1.7.0-5
no fix listed

Open the chart page →

1,623
wordpress-mysqlsikalabs0.1.21 of 2See more

wordpress-mysql sikalabs 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/wordpress:latesta85a30d9e752
pam@1.7.0-5
no fix listed

Open the chart page →

3,205
simple-websimple-webVerified publisher1.1.11 of 1See more

simple-web simple-web 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
pam@1.7.0-5
no fix listed

Open the chart page →

1,623
bitwardensinextraVerified publisher0.10.21 of 1See more

bitwarden sinextra 0.10.2

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.2094b5689ed81
pam@1.7.0-5
no fix listed

Open the chart page →

1,812
clickhouse-keepersinextraVerified publisher0.7.21 of 1See more

clickhouse-keeper sinextra 0.7.2

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:24.12.6a65ca89ddbe8
pam@1.4.0-11ubuntu2.5
1.4.0-11ubuntu2.7

Open the chart page →

2,273
fluentdsinextraVerified publisher1.4.51 of 1See more

fluentd sinextra 1.4.5

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/fluentd:1.19.33273d13f1e75
pam@1.7.0-5
no fix listed

Open the chart page →

1,160
infisicalsinextraVerified publisher0.6.01 of 1See more

infisical sinextra 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
infisical/infisical:v0.165.602082bf13163
pam@1.7.0-5
no fix listed

Open the chart page →

3,147
mongosqldsinextraVerified publisher0.3.71 of 1See more

mongosqld sinextra 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/mongosqld:2.14.230b826375ed42
pam@1.4.0-11ubuntu2.5
1.4.0-11ubuntu2.7

Open the chart page →

2,653
mongosyncsinextraVerified publisher0.4.01 of 1See more

mongosync sinextra 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/mongosync:1.15.0fa99ed475f03
pam@1.5.3-5ubuntu5.4
1.5.3-5ubuntu5.6

Open the chart page →

2,913
pgbouncersinextraVerified publisher0.17.01 of 1See more

pgbouncer sinextra 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/pgbouncer:16.1518f1121ba0a4
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

2,001
service-commonsinextraVerified publisher0.3.161 of 1See more

service-common sinextra 0.3.16

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/haproxy:2.8.28255149ffd013
pam@1.7.0-5
no fix listed

Open the chart page →

602
sistas-chatbotsistas-chatbot5.0.21 of 6See more

sistas-chatbot sistas-chatbot 5.0.2

1 of the 6 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
jhipster/jhipster-registry:latest7184525acd4d
pam@1.3.1-5ubuntu4.7
no fix listed

Open the chart page →

5,963
mimirskyloud-helm-chartsVerified publisher5.5.12 of 5See more

mimir skyloud-helm-charts 5.5.1

2 of the 5 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2023-09-29T16-41-22Za784ce6e3b1b
pam@1.3.1-25.el8
0:1.3.1-40.el8_10
quay.io/minio/minio:RELEASE.2023-09-30T07-02-29Z6262bc9a2730
pam@1.3.1-25.el8
0:1.3.1-40.el8_10

Open the chart page →

10,841
yopasssky-sailVerified publisher1.3.11 of 2See more

yopass sky-sail 1.3.1

1 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/memcached:1.6.409ae868852d0b
pam@1.7.0-5
no fix listed

Open the chart page →

3,107
envoyslamdev0.0.171 of 2See more

envoy slamdev 0.0.17

1 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.18.2e8b37c1d7578
pam@1.1.8-3.6ubuntu2.18.04.2
no fix listed

Open the chart page →

4,757
gitlab-runnerslamdev0.0.11 of 1See more

gitlab-runner slamdev 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
pam@1.3.1-5ubuntu4.3
no fix listed

Open the chart page →

9,313
slothsloth0.16.01 of 2See more

sloth sloth 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
pam@1.7.0-5
no fix listed

Open the chart page →

4,047
oi-slurm-cluster-chartslurm-cluster-chart0.25.11 of 4See more

oi-slurm-cluster-chart slurm-cluster-chart 0.25.1

1 of the 4 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/mariadb:10.10334b315c10e5
pam@1.4.0-11ubuntu2.4
1.4.0-11ubuntu2.7

Open the chart page →

4,444
slurm-cluster-chartslurm-cluster-chart0.25.01 of 4See more

slurm-cluster-chart slurm-cluster-chart 0.25.0

1 of the 4 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
library/mariadb:10.10334b315c10e5
pam@1.4.0-11ubuntu2.4
1.4.0-11ubuntu2.7

Open the chart page →

4,444
deconzsmall-hack0.1.01 of 1See more

deconz small-hack 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.26.123c86008d73f
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

13,373
amt-configuresmarthallVerified publisher0.1.11 of 1See more

amt-configure smarthall 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
boxcutter/meshcmd:1.1.384e13f01bcab
pam@1.4.0-11ubuntu2.3
1.4.0-11ubuntu2.7

Open the chart page →

2,812
mealiesmarthallVerified publisher0.0.101 of 1See more

mealie smarthall 0.0.10

1 of the 1 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

5,687
aafsmo-helm-chart6.0.01 of 14See more

aaf smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pam@1.1.8-3.2ubuntu2.1
no fix listed

Open the chart page →

80,516
aaismo-helm-chart6.0.01 of 14See more

aai smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pam@1.1.8-3.2ubuntu2.1
no fix listed

Open the chart page →

80,550
dgbuildersmo-helm-chart6.0.01 of 3See more

dgbuilder smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
pam@1.1.8-3.2ubuntu2
no fix listed

Open the chart page →

85,188
dmaap-listenersmo-helm-chart6.0.01 of 3See more

dmaap-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pam@1.1.8-3.2ubuntu2.1
no fix listed

Open the chart page →

80,516
elasticsearchsmo-helm-chart6.0.01 of 5See more

elasticsearch smo-helm-chart 6.0.0

1 of the 5 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pam@1.1.8-3.2ubuntu2.1
no fix listed

Open the chart page →

79,523
logsmo-helm-chart6.0.01 of 6See more

log smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
pam@1.1.8-3.2ubuntu2
no fix listed

Open the chart page →

85,942
mariadb-initsmo-helm-chart6.0.01 of 2See more

mariadb-init smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
pam@1.1.8-3.2ubuntu2.1
no fix listed

Open the chart page →

79,523
msbsmo-helm-chart6.0.01 of 6See more

msb smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2026-54411.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
pam@1.1.8-3.2ubuntu2
no fix listed

Open the chart page →

84,195

Container images carrying it

2,457 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

No deployed image carries CVE-2026-54411.

syft 1.42.1 · advisories as of 23 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.