CVE-2026-54411

High

Advisory

Published 14 Jun 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.2; base score, highest
EPSS: 0.003; 25th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,423; of 17,828 indexed, latest versions
Container images: 2,448; deployed by those charts
Fix available: 2 of 2; affected packages

Red Hat Security Advisory: pam security update

Carried by container images the latest versions of 2,423 of 17,828 indexed charts deploy, on 2,448 images.

Affected package	Affected versions	Fixed in	Images
pamdeb	1.1.8-1ubuntu2, 1.1.8-1ubuntu2.2, 1.1.8-3.2ubuntu2, 1.1.8-3.2ubuntu2.1+33 more	1.4.0-11ubuntu2.7, 1.5.3-5ubuntu5.6, 1.7.0-5+e5, 1.7.0-5ubuntu3.1	2,272
pamrpm	1.1.8-22.el7, 1.1.8-23.el7, 1.3.0-150000.6.86.1, 1.3.0-lp151.7.38+29 more	0:1.1.8-23.el7_9.3, 0:1.3.1-40.el8_10, 0:1.5.1-27.el9_8.1, 0:1.5.1-28.el9_8.1+4 more	176

OSV records: DEBIAN-CVE-2026-54411 RHSA-2026:56131 RHSA-2026:59379 RHSA-2026:60224 RHSA-2026:61227 RHSA-2026:64815 RLSA-2026:56131 RLSA-2026:59379 RLSA-2026:64815 UBUNTU-CVE-2026-54411 ECHO-a8ba-b20f-6dda openSUSE-SU-2026:11201-1 SUSE-SU-2026:22639-1 SUSE-SU-2026:3163-1
Also known as: RHSA-2026:61223, RHSA-2026:61224, RHSA-2026:61225, RHSA-2026:61226, RHSA-2026:61228, RHSA-2026:61230, USN-8601-1

Charts affected

2,423 by stars

Chart	Latest	Affected images	Radar Score

Container images carrying it

2,448 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
opencloudeu/web-extensions :importer-1.0.0	6e8b2df6c5a4	pam@1.5.2-6+deb12u1	no fix listed	2
opencloudeu/web-extensions :progress-bars-1.0.0	82f888a34440	pam@1.5.2-6+deb12u1	no fix listed	2
opencloudeu/web-extensions :json-viewer-1.0.0	e0ac35a9576e	pam@1.5.2-6+deb12u1	no fix listed	2
opencsghq/label-studio :v2.5.0	47e22aa71870	pam@1.7.0-5	no fix listed	2
opendatacube/ows :latest	668cbb41473c	pam@1.5.3-5ubuntu5.1	1.5.3-5ubuntu5.6	2
openebs/etcd :3.6.4-debian-12-r0	c86c06f1ce6a	pam@1.5.2-6+deb12u1	no fix listed	2
patrikx3/p3x-redis-ui :latest	f19eb45b0694	pam@1.5.2-6+deb12u2	no fix listed	2
pgvector/pgvector :0.8.5-pg18-trixie	9d2e61c7352b	pam@1.7.0-5	no fix listed	2
pgvector/pgvector :0.8.6-pg16-bookworm :pg16	ccc6e83d6e35	pam@1.5.2-6+deb12u2	no fix listed	2
piomin/sample-spring-kotlin-microservice :1.1	871f784dd6bc	pam@1.4.0-11ubuntu2	1.4.0-11ubuntu2.7	2
polyaxon/polyaxon-agent :2.17.0	da877a2647fc	pam@1.7.0-5	no fix listed	2
polyaxon/polyaxon-cli :2.17.0	297ed47ed63a	pam@1.7.0-5	no fix listed	2
proxysql/proxysql :3.0.11	0e95d1b7cc32	pam@1.7.0-5	no fix listed	2
qdrant/qdrant :v1.19.1	12364fe851b9	pam@1.7.0-5	no fix listed	2
qichenxu4pd/pythonexample :1.0	f3a8502bc21b	pam@1.5.2-6+deb12u1	no fix listed	2
quickwit/quickwit :v0.8.2	363ff56ce456	pam@1.5.2-6+deb12u1	no fix listed	2
rajnandan1/kener :3.2.19	30407afca731	pam@1.5.2-6+deb12u1	no fix listed	2
redis/redis-stack :7.2.0-v9	1c5f43fddcdd	pam@1.4.0-11ubuntu2.4	1.4.0-11ubuntu2.7	2
redis/redis-stack-server :7.4.0 :7.4.0-v1	72035434f455	pam@1.4.0-11ubuntu2.4	1.4.0-11ubuntu2.7	2
redis/redis-stack-server :7.2.0-v10	e44b2b49d059	pam@1.4.0-11ubuntu2.4	1.4.0-11ubuntu2.7	2
rotationalio/quarterdeck :0.16.0	0e7ad3a031dc	pam@1.5.2-6+deb12u2	no fix listed	2
safeglobal/safe-config-service :latest	09a5e495c219	pam@1.7.0-5	no fix listed	2
safeglobal/safe-transaction-service :latest	80db836cc5d5	pam@1.7.0-5	no fix listed	2
sigp/lighthouse :v8.1.3	44aa773dcf27	pam@1.4.0-11ubuntu2.6	1.4.0-11ubuntu2.7	2
sikalabs/hello-world-server :latest	5f49bf889a64	pam@1.7.0-5	no fix listed	2
smartedge/generic-multi-access-network-virtualization :1.0	4cd63c22ce36	pam@1.3.1-5ubuntu4.3	no fix listed	2
speckle/speckle-preview-service :2.18.11-branch.testing2.88634-335d469 :2.18.12-branch.testing3.88744-f55b341	4bd113093583	pam@1.5.2-6+deb12u1	no fix listed	2
streamnative/apache-pulsar-grafana-dashboard-k8s :0.1.2	0e6d7aa3ef32	pam@1.3.1-5ubuntu4.7	no fix listed	2
svtechnmaa/svtech_debuger :v1.0.0	b2987abe57d3	pam@1.4.0-11ubuntu2	1.4.0-11ubuntu2.7	2
taigaio/taiga-back :latest	4beed8f62c9f	pam@1.7.0-5	no fix listed	2
taigaio/taiga-protected :latest	fd4568a97a59	pam@1.7.0-5	no fix listed	2
testinprod/op-erigon :latest	0a125bd77a2d	pam@1.5.2-6+deb12u1	no fix listed	2
tzahi12345/youtubedl-material :4.3.2 :latest	2f943d584711	pam@1.4.0-11ubuntu2.3	1.4.0-11ubuntu2.7	2
uffizzi/controller :latest	0344805f267b	pam@1.5.2-6+deb12u1	no fix listed	2
valkey/valkey :8	3fbd2e3e4b6e	pam@1.7.0-5	no fix listed	2
valkey/valkey :9.0.1	546304417fea	pam@1.7.0-5	no fix listed	2
valkey/valkey :8.1.4	81db6d39e1bb	pam@1.7.0-5	no fix listed	2
valkey/valkey :9.1.0	8e8d64b405ce	pam@1.7.0-5	no fix listed	2
vaultwarden/server :1.37.3	1587c45feaa4	pam@1.7.0-5	no fix listed	2
vdiogov/glpi-conteiner :latest	6945f84f0058	pam@1.5.2-6+deb12u1	no fix listed	2
wolveix/satisfactory-server :latest :v1.9.10	e103700ae6ae	pam@1.4.0-11ubuntu2.6	1.4.0-11ubuntu2.7	2
wurstmeister/zookeeper :latest	7a7fd44a7210	pam@1.1.8-1ubuntu2	no fix listed	2
zabbix/zabbix-agent :ubuntu-6.4-latest	349b924472a7	pam@1.5.3-5ubuntu5.1	1.5.3-5ubuntu5.6	2
gcr.io/google_containers/kubernetes-dashboard-init-amd64 :v1.0.0	fbe12aa24de6	pam@1.1.8-3.2ubuntu2	no fix listed	2
ghcr.io/appscode/inbox-server :latest :postgres-latest	536358d7b17e	pam@1.4.0-11ubuntu2.6	1.4.0-11ubuntu2.7	2
ghcr.io/astriaorg/conductor :latest	3ea8164b0eae	pam@1.5.2-6+deb12u1	no fix listed	2
ghcr.io/bryopsida/k8s-dev-pod :main	82d0b161161d	pam@1.5.3-5ubuntu5.1	1.5.3-5ubuntu5.6	2
ghcr.io/chroma-core/chroma :1.5.9	1e0b73a187a2	pam@1.7.0-5	no fix listed	2
ghcr.io/codingducksrl/laravel :8.1	5be52524664c	pam@1.4.0-11ubuntu2	1.4.0-11ubuntu2.7	2
ghcr.io/danbooru/danbooru :9cab67c0ac72a8c52289302c519715ceec2372d9	5f545698e907	pam@1.4.0-11ubuntu2	1.4.0-11ubuntu2.7	2