StackRadar

CVE-2026-56153

High

Advisory

Published 1 Oct 2026In the index since 2 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
26th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
92
of 17,985 indexed, latest versions
Container images
86
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 92 of 17,985 indexed charts deploy, on 86 images.

Affected packageAffected versionsFixed inImages
apache2deb2.4.41-4ubuntu3.11, 2.4.41-4ubuntu3.12, 2.4.41-4ubuntu3.14, 2.4.41-4ubuntu3.17+22 moreno fix listed74
apache2apk2.4.62-r0, 2.4.63-r4, 2.4.66-r0, 2.4.67-r0+1 more2.4.69-r012
OSV records
ALPINE-CVE-2026-56153DEBIAN-CVE-2026-56153UBUNTU-CVE-2026-56153

Charts affected

92 by stars
ChartLatestAffected imagesRadar Score
nextcloudnextcloud9.4.01 of 1See more

nextcloud nextcloud 9.4.0

1 of the 1 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
library/nextcloud:35.0.1-apacheb1ae671e9815
apache2@2.4.68-1~deb13u1
no fix listed

Open the chart page →

4,636
dragonflydragonflyVerified publisher1.8.51 of 3See more

dragonfly dragonfly 1.8.5

1 of the 3 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
dragonflyoss/client:v1.5.59fe2a1d6206f
apache2@2.4.68-1~deb12u1
no fix listed

Open the chart page →

4,945
yourlsyourlsOfficialVerified publisher8.10.51 of 2See more

yourls yourls 8.10.5

1 of the 2 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
ghcr.io/yourls/yourls:1.10.62f2879125903
apache2@2.4.68-1~deb13u1
no fix listed

Open the chart page →

2,426
snipeitt3n3.4.11 of 2See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
snipe/snipe-it:v6.0.1455fb7636a98c
apache2@2.4.41-4ubuntu3.12
no fix listed

Open the chart page →

89,009
wordpressgroundhog2k0.16.61 of 1See more

wordpress groundhog2k 0.16.6

1 of the 1 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
library/wordpress:7.1.2-apachebb209c8ab111
apache2@2.4.68-1~deb13u1
no fix listed

Open the chart page →

3,548
nextcloudgroundhog2k0.22.81 of 3See more

nextcloud groundhog2k 0.22.8

1 of the 3 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
library/nextcloud:35.0.1:35.0.1-apacheb1ae671e9815
apache2@2.4.68-1~deb13u1
no fix listed

Open the chart page →

4,636
monicamonicaOfficialVerified publisher1.0.151 of 1See more

monica monica 1.0.15

1 of the 1 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
ghcr.io/monicahq/monica-next:main8be69156acbb
apache2@2.4.65-2
no fix listed

Open the chart page →

6,450
nuclionuclio0.23.91 of 2See more

nuclio nuclio 0.23.9

1 of the 2 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
quay.io/nuclio/controller:1.17.9-amd646e3913a56ca5
apache2@2.4.68-r0
2.4.69-r0

Open the chart page →

1,450
phpmyadminalekcVerified publisher0.3.11 of 1See more

phpmyadmin alekc 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apache9e915766488a
apache2@2.4.68-1~deb13u1
no fix listed

Open the chart page →

2,704
bookstackgabe565Verified publisher0.20.01 of 1See more

bookstack gabe565 0.20.0

1 of the 1 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
apache2@2.4.62-r0
2.4.69-r0

Open the chart page →

3,229
wordpresshelmforgeVerified publisher3.0.81 of 3See more

wordpress helmforge 3.0.8

1 of the 3 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
library/wordpress:7.1.2-apache8ae73d594a15
apache2@2.4.68-1~deb13u1
no fix listed

Open the chart page →

4,198
abcdesktopabcdesktopOfficialVerified publisher4.4.131 of 9See more

abcdesktop abcdesktop 4.4.13

1 of the 9 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
ghcr.io/abcdesktopio/oc.speedtest:4.4763cc0d3a176
apache2@2.4.68-r0
2.4.69-r0

Open the chart page →

1,506
freshrsschristianhuthVerified publisher2.18.41 of 1See more

freshrss christianhuth 2.18.4

1 of the 1 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
freshrss/freshrss:1.30.0-alpinefcff0b573f2b
apache2@2.4.68-r0
2.4.69-r0

Open the chart page →

338
dolibarrcowboysysopVerified publisher9.0.31 of 3See more

dolibarr cowboysysop 9.0.3

1 of the 3 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
dolibarr/dolibarr:22.0.47ad88fc9b13c
apache2@2.4.67-1~deb12u2
no fix listed

Open the chart page →

10,976
glpiglpi-conteiner0.1.02 of 3See more

glpi glpi-conteiner 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
library/phpmyadmin:latest9e915766488a
apache2@2.4.68-1~deb13u1
no fix listed
vdiogov/glpi-conteiner:latest6945f84f0058
apache2@2.4.61-1~deb12u1
no fix listed

Open the chart page →

12,966
dolibarrhelmforgeVerified publisher1.2.191 of 3See more

dolibarr helmforge 1.2.19

1 of the 3 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
dolibarr/dolibarr:24.0.069ec52e3b7ef
apache2@2.4.68-1~deb12u1
no fix listed

Open the chart page →

4,867
limesurveyarea-42Verified publisher0.3.991 of 2See more

limesurvey area-42 0.3.99

1 of the 2 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
adamzammit/limesurvey:7.5.0911507d751f8
apache2@2.4.68-1~deb13u1
no fix listed

Open the chart page →

5,296
bookstackbookstack-mgVerified publisher0.3.11 of 2See more

bookstack bookstack-mg 0.3.1

1 of the 2 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
linuxserver/bookstack:26.05.202605282ebf97852661
apache2@2.4.67-r0
2.4.69-r0

Open the chart page →

2,142
part-dbpart-dbVerified publisher0.1.21 of 1See more

part-db part-db 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
jbtronics/part-db1:latestfd68338829ed
apache2@2.4.68-1~deb12u1
no fix listed

Open the chart page →

3,978
phpmyadminphpmyadminVerified publisher1.0.31 of 1See more

phpmyadmin phpmyadmin 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apache0b38dba8580a
apache2@2.4.68-1~deb13u1
no fix listed

Open the chart page →

2,704
typo3christianhuthVerified publisher7.8.11 of 2See more

typo3 christianhuth 7.8.1

1 of the 2 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
martinhelmich/typo3:12.4c83a4f3fd7ae
apache2@2.4.66-1~deb12u1
no fix listed

Open the chart page →

9,818
phpipamdigitalhubVerified publisher0.1.12 of 2See more

phpipam digitalhub 0.1.1

2 of the 2 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
phpipam/phpipam-cron:latest13a0c266ddd2
apache2@2.4.68-r0
2.4.69-r0
phpipam/phpipam-www:latestbaab8c632f4d
apache2@2.4.68-r0
2.4.69-r0

Open the chart page →

908
dragonfly-stackdragonflyVerified publisher0.1.21 of 7See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
apache2@2.4.59-1~deb12u1
no fix listed

Open the chart page →

21,910
roundcubeencircle360-ossVerified publisher0.8.31 of 1See more

roundcube encircle360-oss 0.8.3

1 of the 1 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
roundcube/roundcubemail:1.6.16-apache-nonroot17d9d9580962
apache2@2.4.67-1~deb13u3
no fix listed

Open the chart page →

6,547
matomohelmforgeVerified publisher2.3.21 of 3See more

matomo helmforge 2.3.2

1 of the 3 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
library/matomo:5.14.0-apache0b4d0c328722
apache2@2.4.68-1~deb13u1
no fix listed

Open the chart page →

3,104
kdiffkdiff-snapshotsVerified publisher0.0.2031 of 2See more

kdiff kdiff-snapshots 0.0.203

1 of the 2 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
filegator/filegator:latest34bf565a11a4
apache2@2.4.68-1~deb13u1
no fix listed

Open the chart page →

9,317
glpikitsune-itopsVerified publisher1.0.71 of 3See more

glpi kitsune-itops 1.0.7

1 of the 3 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
glpi/glpi:latest7b50172cdb7d
apache2@2.4.68-1~deb13u1
no fix listed

Open the chart page →

4,698
owncloudkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 3See more

owncloud kubernetes-homelab-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
owncloud/server:10.16.274c53d341076
apache2@2.4.52-1ubuntu4.20
no fix listed

Open the chart page →

11,447
helm-composenousefreakVerified publisher0.1.31 of 2See more

helm-compose nousefreak 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
library/wordpress:latesta85a30d9e752
apache2@2.4.68-1~deb13u1
no fix listed

Open the chart page →

15,281
matomopockostVerified publisher1.4.01 of 3See more

matomo pockost 1.4.0

1 of the 3 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
pockost/matomo:5.14.0134c35415788
apache2@2.4.68-1~deb13u1
no fix listed

Open the chart page →

6,033
phpqonstruktVerified publisher0.2.01 of 1See more

php qonstrukt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
qonstrukt/php:8.4-v8-apache089af7925aa1
apache2@2.4.58-1ubuntu8.15
no fix listed

Open the chart page →

62,586
kimai2robjuz5.0.141 of 2See more

kimai2 robjuz 5.0.14

1 of the 2 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
kimai/kimai2:2.67.03084f1e5ecdc
apache2@2.4.68-1~deb12u1
no fix listed

Open the chart page →

6,014
sogosogoVerified publisher0.3.51 of 2See more

sogo sogo 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
apache2@2.4.66-1~deb13u1
no fix listed

Open the chart page →

8,492
typemilltypemill-helm-chart2.3.02 of 2See more

typemill typemill-helm-chart 2.3.0

2 of the 2 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
kixote/typemilldigest-pinned628f79a08cc7
apache2@2.4.68-1~deb13u1
no fix listed
kixote/typemilldigest-pinned7dfb517d24f0
apache2@2.4.68-1~deb13u1
no fix listed

Open the chart page →

6,097
wordpress-e2e-setupwoocommerce-e2e-setup0.1.11 of 2See more

wordpress-e2e-setup woocommerce-e2e-setup 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
library/wordpress:6.8-apache30bff39330d1
apache2@2.4.65-2
no fix listed

Open the chart page →

8,972
linkstackadnoctemVerified publisher0.4.01 of 1See more

linkstack adnoctem 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
linkstackorg/linkstack:latest1c8b05399ee4
apache2@2.4.66-r0
2.4.69-r0

Open the chart page →

2,401
dokuwikiarea-42Verified publisher0.1.81 of 1See more

dokuwiki area-42 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
apache2@2.4.65-2
no fix listed

Open the chart page →

8,498
keystonearzu0.2.292 of 4See more

keystone arzu 0.2.29

2 of the 4 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
apache2@2.4.41-4ubuntu3.14
no fix listed
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
apache2@2.4.41-4ubuntu3.14
no fix listed

Open the chart page →

24,483
apachecamptocamp-apache0.4.01 of 2See more

apache camptocamp-apache 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
camptocamp/mapserver:latest98e908c81ff8
apache2@2.4.58-1ubuntu8.15
no fix listed

Open the chart page →

1,892
mapservercamptocamp-apache0.1.101 of 2See more

mapserver camptocamp-apache 0.1.10

1 of the 2 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
camptocamp/mapserver:master5f9ddd0b9c5b
apache2@2.4.66-2ubuntu2.4
no fix listed

Open the chart page →

2,476
chart-dnazarenochart-dnazareno0.1.01 of 3See more

chart-dnazareno chart-dnazareno 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.16e75aa8f767c
apache2@2.4.62-1~deb12u2
no fix listed

Open the chart page →

6,674
phpmyadmincloudpirates-phpmyadmin0.1.01 of 1See more

phpmyadmin cloudpirates-phpmyadmin 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apachee1d42a6985a9
apache2@2.4.68-1~deb13u1
no fix listed

Open the chart page →

2,704
domainmoddjjudas21Verified publisher1.0.01 of 1See more

domainmod djjudas21 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
domainmod/domainmod:4.23.04017bfe4c597
apache2@2.4.57-2
no fix listed

Open the chart page →

7,933
ownclouddjjudas21Verified publisher0.3.231 of 3See more

owncloud djjudas21 0.3.23

1 of the 3 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
owncloud/server:10.16.3b3f9efdcd7f7
apache2@2.4.52-1ubuntu4.23
no fix listed

Open the chart page →

11,877
webtreesdjjudas21Verified publisher3.0.01 of 1See more

webtrees djjudas21 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
ghcr.io/nathanvaughn/webtrees:2.2.6034151b61a80
apache2@2.4.67-1~deb13u2
no fix listed

Open the chart page →

6,922
duckdb-uiduckdb-ui0.5.21 of 1See more

duckdb-ui duckdb-ui 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
ghcr.io/beslovas/duckdb-ui:1.3.272f35584026d
apache2@2.4.65-1~deb12u1
no fix listed

Open the chart page →

4,919
wordpresseoc-chartsVerified publisher0.14.41 of 1See more

wordpress eoc-charts 0.14.4

1 of the 1 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
library/wordpress:6.8.3-apache30bff39330d1
apache2@2.4.65-2
no fix listed

Open the chart page →

8,240
matomoeosc-lot-1Verified publisher0.2.01 of 1See more

matomo eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
library/matomo:5.1.2-apache2415789e1602
apache2@2.4.62-1~deb12u2
no fix listed

Open the chart page →

5,925
espocrmespocrmVerified publisher1.0.11 of 2See more

espocrm espocrm 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
espocrm/espocrm:9.3.101b5a24504ed9
apache2@2.4.67-1~deb13u3
no fix listed

Open the chart page →

7,699
supportpalevilgn0me0.1.61 of 1See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-56153.

Container imageDigestPackageFixed in
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
apache2@2.4.41-4ubuntu3.11
no fix listed

Open the chart page →

22,795

Container images carrying it

86 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
martinhelmich/typo3:12.4c83a4f3fd7ae
apache2@2.4.66-1~deb12u1
no fix listed
1
mautic/mautic:7-apacheeb8cc73d97e1
apache2@2.4.67-1~deb12u2
no fix listed
1
mediagis/nominatim:3.7c15e941485ef
apache2@2.4.41-4ubuntu3.12
no fix listed
1
mediagis/nominatim:4.2d0eae7b51374
apache2@2.4.52-1ubuntu4.7
no fix listed
1
moodlehq/moodle-php-apache:8.4-bookworm922af5166835
apache2@2.4.68-1~deb12u1
no fix listed
1
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
apache2@2.4.41-4ubuntu3.14
no fix listed
1
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
apache2@2.4.41-4ubuntu3.14
no fix listed
1
owncloud/server:10.15.051d9b74fc2a8
apache2@2.4.41-4ubuntu3.21
no fix listed
1
owncloud/server:10.16.274c53d341076
apache2@2.4.52-1ubuntu4.20
no fix listed
1
owncloud/server:10.16.3b3f9efdcd7f7
apache2@2.4.52-1ubuntu4.23
no fix listed
1
phpipam/phpipam-cron:latest13a0c266ddd2
apache2@2.4.68-r0
2.4.69-r0
1
phpipam/phpipam-www:latestbaab8c632f4d
apache2@2.4.68-r0
2.4.69-r0
1
phpmyadmin/phpmyadmin:5.2.342a200db07b4
apache2@2.4.65-2
no fix listed
1
pockost/matomo:5.14.0134c35415788
apache2@2.4.68-1~deb13u1
no fix listed
1
qjoly/kubernetes-coffee-image:simple9f0c5ce8b5d7
apache2@2.4.68-1~deb13u1
no fix listed
1
qonstrukt/php:8.4-v8-apache089af7925aa1
apache2@2.4.58-1ubuntu8.15
no fix listed
1
restic/rest-server:0.14.0d2aff06f47eb
apache2@2.4.63-r4
2.4.69-r0
1
roundcube/roundcubemail:1.6.16-apache-nonroot17d9d9580962
apache2@2.4.67-1~deb13u3
no fix listed
1
snipe/snipe-it:v8.3.1141ebf2386fe
apache2@2.4.58-1ubuntu8.8
no fix listed
1
snipe/snipe-it:v6.0.1455fb7636a98c
apache2@2.4.41-4ubuntu3.12
no fix listed
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
apache2@2.4.41-4ubuntu3.11
no fix listed
1
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
apache2@2.4.66-1~deb13u1
no fix listed
1
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
apache2@2.4.57-2
no fix listed
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
apache2@2.4.41-4ubuntu3.17
no fix listed
1
zooproject/zoo-project:dru-51e7d55383f24594959b69e58518961c6aa66740da112e8d03f1
apache2@2.4.52-1ubuntu4.23
no fix listed
1
ghcr.io/abcdesktopio/oc.speedtest:4.4763cc0d3a176
apache2@2.4.68-r0
2.4.69-r0
1
ghcr.io/beslovas/duckdb-ui:1.3.272f35584026d
apache2@2.4.65-1~deb12u1
no fix listed
1
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
apache2@2.4.41-4ubuntu3.12
no fix listed
1
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
apache2@2.4.62-r0
2.4.69-r0
1
ghcr.io/linuxserver/freshrss:1.29.17f7f276244da
apache2@2.4.68-r0
2.4.69-r0
1
ghcr.io/monicahq/monica-next:main8be69156acbb
apache2@2.4.65-2
no fix listed
1
ghcr.io/nathanvaughn/webtrees:2.2.6034151b61a80
apache2@2.4.67-1~deb13u2
no fix listed
1
ghcr.io/yourls/yourls:1.10.62f2879125903
apache2@2.4.68-1~deb13u1
no fix listed
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
apache2@2.4.41-4ubuntu3.11
no fix listed
1
quay.io/nuclio/controller:1.17.9-amd646e3913a56ca5
apache2@2.4.68-r0
2.4.69-r0
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
apache2@2.4.67-1~deb12u2
no fix listed
1

syft 1.42.1 · advisories as of 3 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.