StackRadar

CVE-2026-54411

High

Advisory

Published 14 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
0.003
25th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,423
of 17,828 indexed, latest versions
Container images
2,448
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: pam security update

Carried by container images the latest versions of 2,423 of 17,828 indexed charts deploy, on 2,448 images.

Affected packageAffected versionsFixed inImages
pamdeb1.1.8-1ubuntu2, 1.1.8-1ubuntu2.2, 1.1.8-3.2ubuntu2, 1.1.8-3.2ubuntu2.1+33 more1.4.0-11ubuntu2.7, 1.5.3-5ubuntu5.6, 1.7.0-5+e5, 1.7.0-5ubuntu3.12,272
pamrpm1.1.8-22.el7, 1.1.8-23.el7, 1.3.0-150000.6.86.1, 1.3.0-lp151.7.38+29 more0:1.1.8-23.el7_9.3, 0:1.3.1-40.el8_10, 0:1.5.1-27.el9_8.1, 0:1.5.1-28.el9_8.1+4 more176
OSV records
DEBIAN-CVE-2026-54411RHSA-2026:56131RHSA-2026:59379RHSA-2026:60224RHSA-2026:61227RHSA-2026:64815RLSA-2026:56131RLSA-2026:59379RLSA-2026:64815UBUNTU-CVE-2026-54411ECHO-a8ba-b20f-6ddaopenSUSE-SU-2026:11201-1SUSE-SU-2026:22639-1SUSE-SU-2026:3163-1
Also known as
RHSA-2026:61223, RHSA-2026:61224, RHSA-2026:61225, RHSA-2026:61226, RHSA-2026:61228, RHSA-2026:61230, USN-8601-1

Charts affected

2,423 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,448 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
pam@1.5.2-6+deb12u1
no fix listed
2
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
pam@1.5.2-6+deb12u2
no fix listed
2
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
pam@1.3.1-5ubuntu4.2
no fix listed
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
pam@1.3.1-5ubuntu4.2
no fix listed
2
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
pam@1.3.1-5ubuntu4.2
no fix listed
2
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
pam@1.5.2-6+deb12u1
no fix listed
2
ghcr.io/immich-app/immich-machine-learning:v3.1.05a0839dc5303
pam@1.5.2-6+deb12u2
no fix listed
2
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
pam@1.7.0-5
no fix listed
2
ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0bcf63357191b
pam@1.5.2-6+deb12u1
no fix listed
2
ghcr.io/it-at-m/refarch/refarch-gateway:1.10.0d74e6a31e2fe
pam@1.6.1-9.el10
0:1.6.1-9.el10_2.1
2
ghcr.io/libredb/libredb-studio:0.16.2c398419c29a7
pam@1.7.0-5
no fix listed
2
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
pam@1.1.8-3.6ubuntu2.18.04.2
no fix listed
2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss:unprivileged-oss-202503313db8145349a3
pam@1.5.2-6+deb12u1
no fix listed
2
ghcr.io/nucleuscloud/neosync/api:0.5.41e2abb798f29f
pam@1.5.2-6+deb12u1
no fix listed
2
ghcr.io/nucleuscloud/neosync/worker:0.5.4196f42450c5b1
pam@1.5.2-6+deb12u1
no fix listed
2
ghcr.io/postgresml/pgcat:main245f9d2f5f5b
pam@1.5.2-6+deb12u1
no fix listed
2
ghcr.io/postgresml/pgcat:v1.2.0627761f6dcbc
pam@1.5.2-6+deb12u1
no fix listed
2
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
pam@1.5.2-6+deb12u1
no fix listed
2
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
pam@1.4.0-11ubuntu2
1.4.0-11ubuntu2.7
2
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
pam@1.5.2-6+deb12u1
no fix listed
2
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
pam@1.5.2-6+deb12u2
no fix listed
2
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
pam@1.3.1-5ubuntu4.6
no fix listed
2
mcr.microsoft.com/mssql/server:2017-latestfbf79e0fea59
pam@1.1.8-3.6ubuntu2.18.04.6
no fix listed
2
public.ecr.aws/cloudnatix/llmariner/model-manager-loader:1.27.026ac7263a823
pam@1.7.0-5
no fix listed
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.6
2
quay.io/minio/mc:RELEASE.2023-09-29T16-41-22Za784ce6e3b1b
pam@1.3.1-25.el8
0:1.3.1-40.el8_10
2
quay.io/minio/minio:RELEASE.2023-09-30T07-02-29Z6262bc9a2730
pam@1.3.1-25.el8
0:1.3.1-40.el8_10
2
quay.io/minio/minio:RELEASE.2023-07-21T21-12-44Z8e5e9490cd50
pam@1.3.1-25.el8
0:1.3.1-40.el8_10
2
quay.io/minio/minio:RELEASE.2023-02-10T18-48-39Za0a002cb113c
pam@1.3.1-22.el8
0:1.3.1-40.el8_10
2
quay.io/openshift/origin-cli:4.7464a3af4dfe0
pam@1.3.1-14.el8
0:1.3.1-40.el8_10
2
quay.io/openshift/origin-cli:4.8bb5e052770e5
pam@1.3.1-14.el8
0:1.3.1-40.el8_10
2
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
pam@1.5.2-6+deb12u2
no fix listed
2
1dev/server:11.9.0cd5b12fe5471
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.6
1
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
pam@1.5.2-6
no fix listed
1
5200710/hadoop:3.2.3-java8092d3088a5fb
pam@1.3.1-5ubuntu4.6
no fix listed
1
a10networks/acos-prometheus-exporter:latest8dc58d434d71
pam@1.1.8-3.6ubuntu2.18.04.1
no fix listed
1
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
pam@1.7.0-5
no fix listed
1
aboogie/login_test_backend:new9c41a4483ac8
pam@1.5.2-6+deb12u1
no fix listed
1
actualbudget/actual-server:25.3.158fecd9088b7
pam@1.5.2-6+deb12u1
no fix listed
1
adamzammit/limesurvey:7.1.2b642712ce9a6
pam@1.7.0-5
no fix listed
1
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.6
1
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.6
1
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
pam@1.3.1-5ubuntu4.1
no fix listed
1
aerospike/aerospike-kubernetes-operator:4.5.070a9eeb991b8
pam@1.6.1-9.el10
0:1.6.1-9.el10_2.1
1
ahmetfurkandemir/iceberg-rest-fixture-postgresql:1.10.0142231a0b8b7
pam@1.4.0-11ubuntu2.6
1.4.0-11ubuntu2.7
1
aibrix/metadata-service:v0.7.063fb81a64377
pam@1.5.2-6+deb12u1
no fix listed
1
airbyte/manifest-server:7.28.2deec511b51c3
pam@1.5.2-6+deb12u1
no fix listed
1
airbyte/pod-sweeper:1.5.198d2c39d512e
pam@1.5.2-6+deb12u1
no fix listed
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
pam@1.3.1-5ubuntu4.1
no fix listed
1
akaunting/akaunting:3.0.1552811b36ec3a
pam@1.5.2-6
no fix listed
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.