CVE-2026-56154
CriticalAdvisory
Published 1 Oct 2026In the index since 2 Oct 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.8
- base score, highest
- EPSS
- 0.004
- 34th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 92
- of 17,985 indexed, latest versions
- Container images
- 86
- deployed by those charts
- Fix available
- 1 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 92 of 17,985 indexed charts deploy, on 86 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| apache2deb | 2.4.41-4ubuntu3.11, 2.4.41-4ubuntu3.12, 2.4.41-4ubuntu3.14, 2.4.41-4ubuntu3.17+22 more | no fix listed | 74 |
| apache2apk | 2.4.62-r0, 2.4.63-r4, 2.4.66-r0, 2.4.67-r0+1 more | 2.4.69-r0 | 12 |
Charts affected
92 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| nextcloudnextcloud | 9.4.0 | 1 of 1See more | 4,636 |
| dragonflydragonflyVerified publisher | 1.8.5 | 1 of 3See more | 4,945 |
| yourlsyourlsOfficialVerified publisher | 8.10.5 | 1 of 2See more | 2,426 |
| snipeitt3n | 3.4.1 | 1 of 2See more | 89,009 |
| wordpressgroundhog2k | 0.16.6 | 1 of 1See more | 3,548 |
| nextcloudgroundhog2k | 0.22.8 | 1 of 3See more | 4,636 |
| monicamonicaOfficialVerified publisher | 1.0.15 | 1 of 1See more | 6,450 |
| nuclionuclio | 0.23.9 | 1 of 2See more | 1,450 |
| phpmyadminalekcVerified publisher | 0.3.1 | 1 of 1See more | 2,704 |
| bookstackgabe565Verified publisher | 0.20.0 | 1 of 1See more | 3,229 |
| wordpresshelmforgeVerified publisher | 3.0.8 | 1 of 3See more | 4,198 |
| abcdesktopabcdesktopOfficialVerified publisher | 4.4.13 | 1 of 9See more | 1,506 |
| freshrsschristianhuthVerified publisher | 2.18.4 | 1 of 1See more | 338 |
| dolibarrcowboysysopVerified publisher | 9.0.3 | 1 of 3See more | 10,976 |
| glpiglpi-conteiner | 0.1.0 | 2 of 3See more | 12,966 |
| dolibarrhelmforgeVerified publisher | 1.2.19 | 1 of 3See more | 4,867 |
| limesurveyarea-42Verified publisher | 0.3.99 | 1 of 2See more | 5,296 |
| bookstackbookstack-mgVerified publisher | 0.3.1 | 1 of 2See more | 2,142 |
| part-dbpart-dbVerified publisher | 0.1.2 | 1 of 1See more | 3,978 |
| phpmyadminphpmyadminVerified publisher | 1.0.3 | 1 of 1See more | 2,704 |
| typo3christianhuthVerified publisher | 7.8.1 | 1 of 2See more | 9,818 |
| phpipamdigitalhubVerified publisher | 0.1.1 | 2 of 2See more | 908 |
| dragonfly-stackdragonflyVerified publisher | 0.1.2 | 1 of 7See more | 21,910 |
| roundcubeencircle360-ossVerified publisher | 0.8.3 | 1 of 1See more | 6,547 |
| matomohelmforgeVerified publisher | 2.3.2 | 1 of 3See more | 3,104 |
| kdiffkdiff-snapshotsVerified publisher | 0.0.203 | 1 of 2See more | 9,317 |
| glpikitsune-itopsVerified publisher | 1.0.7 | 1 of 3See more | 4,698 |
| owncloudkubernetes-homelab-helm-chartsVerified publisher | 0.1.0 | 1 of 3See more | 11,447 |
| helm-composenousefreakVerified publisher | 0.1.3 | 1 of 2See more | 15,281 |
| matomopockostVerified publisher | 1.4.0 | 1 of 3See more | 6,033 |
| phpqonstruktVerified publisher | 0.2.0 | 1 of 1See more | 62,586 |
| kimai2robjuz | 5.0.14 | 1 of 2See more | 6,014 |
| sogosogoVerified publisher | 0.3.5 | 1 of 2See more | 8,492 |
| typemilltypemill-helm-chart | 2.3.0 | 2 of 2See more | 6,097 |
| wordpress-e2e-setupwoocommerce-e2e-setup | 0.1.1 | 1 of 2See more | 8,972 |
| linkstackadnoctemVerified publisher | 0.4.0 | 1 of 1See more | 2,401 |
| dokuwikiarea-42Verified publisher | 0.1.8 | 1 of 1See more | 8,498 |
| keystonearzu | 0.2.29 | 2 of 4See more | 24,483 |
| apachecamptocamp-apache | 0.4.0 | 1 of 2See more | 1,892 |
| mapservercamptocamp-apache | 0.1.10 | 1 of 2See more | 2,476 |
| chart-dnazarenochart-dnazareno | 0.1.0 | 1 of 3See more | 6,674 |
| phpmyadmincloudpirates-phpmyadmin | 0.1.0 | 1 of 1See more | 2,704 |
| domainmoddjjudas21Verified publisher | 1.0.0 | 1 of 1See more | 7,933 |
| ownclouddjjudas21Verified publisher | 0.3.23 | 1 of 3See more | 11,877 |
| webtreesdjjudas21Verified publisher | 3.0.0 | 1 of 1See more | 6,922 |
| duckdb-uiduckdb-ui | 0.5.2 | 1 of 1See more | 4,919 |
| wordpresseoc-chartsVerified publisher | 0.14.4 | 1 of 1See more | 8,240 |
| matomoeosc-lot-1Verified publisher | 0.2.0 | 1 of 1See more | 5,925 |
| espocrmespocrmVerified publisher | 1.0.1 | 1 of 2See more | 7,699 |
| supportpalevilgn0me | 0.1.6 | 1 of 1See more | 22,795 |
Container images carrying it
86 by charts deploying them
A fixed version is listed for 1 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| library/ | 9e915766488a | apache2 | no fix listed | 6 |
| library/ | b1ae671e9815 | apache2 | no fix listed | 2 |
| library/ | 6e75aa8f767c | apache2 | no fix listed | 2 |
| library/ | 30bff39330d1 | apache2 | no fix listed | 2 |
| library/ | 8746e7e072e3 | apache2 | no fix listed | 2 |
| library/ | a85a30d9e752 | apache2 | no fix listed | 2 |
| vdiogov/ | 6945f84f0058 | apache2 | no fix listed | 2 |
| adamzammit/ | 911507d751f8 | apache2 | no fix listed | 1 |
| akaunting/ | 52811b36ec3a | apache2 | no fix listed | 1 |
| camptocamp/ | 5f9ddd0b9c5b | apache2 | no fix listed | 1 |
| camptocamp/ | 98e908c81ff8 | apache2 | no fix listed | 1 |
| checkmk/ | c11b422210c4 | apache2 | no fix listed | 1 |
| dgraziotin/ | 38f2de42bed0 | apache2 | no fix listed | 1 |
| dokuwiki/ | f08ecfdda239 | apache2 | no fix listed | 1 |
| dolibarr/ | 69ec52e3b7ef | apache2 | no fix listed | 1 |
| dolibarr/ | 7ad88fc9b13c | apache2 | no fix listed | 1 |
| domainmod/ | 4017bfe4c597 | apache2 | no fix listed | 1 |
| dragonflyoss/ | 9fe2a1d6206f | apache2 | no fix listed | 1 |
| dragonflyoss/ | edf3e921f4e0 | apache2 | no fix listed | 1 |
| espocrm/ | 1b5a24504ed9 | apache2 | no fix listed | 1 |
| filegator/ | 34bf565a11a4 | apache2 | no fix listed | 1 |
| freshrss/ | fcff0b573f2b | apache2 | 2.4.69-r0 | 1 |
| glpi/ | 7b50172cdb7d | apache2 | no fix listed | 1 |
| gulacedia/ | 67b467d961ca | apache2 | no fix listed | 1 |
| intelowlproject/ | 0b22e547ea6b | apache2 | no fix listed | 1 |
| jbtronics/ | fd68338829ed | apache2 | no fix listed | 1 |
| jhoncytech/ | 18c3ca1f411e | apache2 | no fix listed | 1 |
| jordan/ | f75025fe8ea8 | apache2 | no fix listed | 1 |
| kfirfer/ | 2efb4a5d74a3 | apache2 | no fix listed | 1 |
| kimai/ | 3084f1e5ecdc | apache2 | no fix listed | 1 |
| kitware/ | da5abe941506 | apache2 | no fix listed | 1 |
| kixote/ | 628f79a08cc7 | apache2 | no fix listed | 1 |
| kixote/ | 7dfb517d24f0 | apache2 | no fix listed | 1 |
| library/ | 6d5a1c0837a1 | apache2 | no fix listed | 1 |
| library/ | 0b4d0c328722 | apache2 | no fix listed | 1 |
| library/ | 2415789e1602 | apache2 | no fix listed | 1 |
| library/ | 8b19e819f2e1 | apache2 | no fix listed | 1 |
| library/ | 276547e033df | apache2 | no fix listed | 1 |
| library/ | 588609d76b21 | apache2 | no fix listed | 1 |
| library/ | b7faa1653c39 | apache2 | no fix listed | 1 |
| library/ | 0b38dba8580a | apache2 | no fix listed | 1 |
| library/ | e1d42a6985a9 | apache2 | no fix listed | 1 |
| library/ | 8ae66efb09a2 | apache2 | no fix listed | 1 |
| library/ | 8ae73d594a15 | apache2 | no fix listed | 1 |
| library/ | bb209c8ab111 | apache2 | no fix listed | 1 |
| library/ | f73396626d2f | apache2 | no fix listed | 1 |
| linkstackorg/ | 1c8b05399ee4 | apache2 | 2.4.69-r0 | 1 |
| linuxserver/ | 2ebf97852661 | apache2 | 2.4.69-r0 | 1 |
| linuxserver/ | 4c2b77d7e391 | apache2 | 2.4.69-r0 | 1 |
| linuxserver/ | 0c8b547eda88 | apache2 | 2.4.69-r0 | 1 |