StackRadar

CVE-2026-56392

Medium

Advisory

Published 24 Jul 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,776
of 17,803 indexed, latest versions
Container images
1,782
deployed by those charts
Fix available
1 of 2
affected packages

Red Hat Bug Fix Advisory: coreutils bug fix and enhancement update

Carried by container images the latest versions of 1,776 of 17,803 indexed charts deploy, on 1,782 images.

Affected packageAffected versionsFixed inImages
coreutilsdeb9.1-1, 9.7-3, 9.7-3+dhi3, 9.7-3+dhi4no fix listed1,294
coreutilsrpm8.30-6.el8, 8.30-6.el8_1.1, 8.30-7.el8_2.1, 8.30-8.el8+11 more0:8.30-20.el8_10, 0:8.32-41.el9_8.1488
OSV records
DEBIAN-CVE-2026-56392RHBA-2026:47115RHSA-2026:66403RLSA-2026:66403

Charts affected

1,776 by stars
ChartLatestAffected imagesRadar Score
apisixwenerme2.17.01 of 3See more

apisix wenerme 2.17.0

1 of the 3 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
bitnamilegacy/etcd:latest99b408c15272
coreutils@9.1-1
no fix listed

Open the chart page →

3,166
apisix-ingress-controllerwenerme1.4.01 of 2See more

apisix-ingress-controller wenerme 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
ghcr.io/api7/adc:0.27.1f65f53dd9668
coreutils@9.1-1
no fix listed

Open the chart page →

1,708
giteawenerme12.7.03 of 4See more

gitea wenerme 12.7.0

3 of the 4 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
coreutils@9.1-1
no fix listed
bitnamilegacy/postgresql-repmgr:17.6.0-debian-12-r2f12387ec882b
coreutils@9.1-1
no fix listed
bitnamilegacy/valkey-cluster:8.1.3-debian-12-r332869e769b7e
coreutils@9.1-1
no fix listed

Open the chart page →

8,972
juicefs-csi-driverwenerme0.33.01 of 5See more

juicefs-csi-driver wenerme 0.33.0

1 of the 5 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.33.0f918e7331c05
coreutils@9.1-1
no fix listed

Open the chart page →

8,992
mesherywenerme1.0.701 of 1See more

meshery wenerme 1.0.70

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
meshery/meshery:stable-latest44b64ee128fb
coreutils@9.1-1
no fix listed

Open the chart page →

1,495
miniowenerme8.0.101 of 1See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
coreutils@8.30-8.el8
0:8.30-20.el8_10

Open the chart page →

6,949
minio-standalonewenerme1.0.21 of 1See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2022-01-04T07-41-07Z1484c87239ea
coreutils@8.30-12.el8
0:8.30-20.el8_10

Open the chart page →

6,172
wexa-studiowexa-studio1.2.03 of 15See more

wexa-studio wexa-studio 1.2.0

3 of the 15 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2024-01-16T16-07-38Z4c4a4876193f
coreutils@8.32-34.el9
0:8.32-41.el9_8.1
qdrant/qdrant:v1.7.45f2a56b95266
coreutils@9.1-1
no fix listed
quay.io/mongodb/mongodb-kubernetes-operator:0.9.05ee4bd681085
coreutils@8.30-15.el8
0:8.30-20.el8_10

Open the chart page →

15,376
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
coreutils@9.7-3
no fix listed

Open the chart page →

5,525
keycloakwiremindVerified publisher25.3.12 of 2See more

keycloak wiremind 25.3.1

2 of the 2 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
coreutils@9.1-1
no fix listed
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
coreutils@9.1-1
no fix listed

Open the chart page →

7,741
marge-botwiremindVerified publisher1.4.41 of 1See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.14.0dcffb926e563
coreutils@9.1-1
no fix listed

Open the chart page →

5,584
rabbitmqwiremindVerified publisher16.0.171 of 1See more

rabbitmq wiremind 16.0.17

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/rabbitmq:4.2.2-debian-12-r11572e12bc93c
coreutils@9.1-1
no fix listed

Open the chart page →

2,519
rediswiremindVerified publisher23.0.61 of 1See more

redis wiremind 23.0.6

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/redis:8.4.0-debian-12-r31f0f7ddc4370
coreutils@9.1-1
no fix listed

Open the chart page →

2,162
wordpress-alpinewordpress-alpine1.5.181 of 6See more

wordpress-alpine wordpress-alpine 1.5.18

1 of the 6 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
library/memcached:1.6.45dc561d52bb8a
coreutils@9.7-3
no fix listed

Open the chart page →

4,103
Wordpresswordpress-mariadb1.0.21 of 2See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
library/wordpress:latest5a93c470ae82
coreutils@9.7-3
no fix listed

Open the chart page →

5,737
workshop-pipelinesworkshop-pipelines0.1.62 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

2 of the 2 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
coreutils@9.1-1
no fix listed
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
coreutils@8.30-12.el8
0:8.30-20.el8_10

Open the chart page →

11,643
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
coreutils@9.1-1
no fix listed

Open the chart page →

7,672
xkopsxkops0.1.03 of 5See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
coreutils@9.1-1
no fix listed
hamzaarshad10/querypodpy:1.7154f38e8668e
coreutils@9.1-1
no fix listed
murtazashah46/helmfile:latest4d11726cf803
coreutils@9.1-1
no fix listed

Open the chart page →

13,875
nginx-chartxxoznge-nginx0.1.01 of 1See more

nginx-chart xxoznge-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
coreutils@9.7-3
no fix listed

Open the chart page →

1,879
helm-demoyahoon-helm-demoVerified publisher1.0.01 of 1See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
ghcr.io/yahoon/helm-demo:1.0.02930290a758c
coreutils@9.7-3
no fix listed

Open the chart page →

1,330
my-nginx-appyasser-nginx-app0.1.01 of 1See more

my-nginx-app yasser-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
coreutils@9.7-3
no fix listed

Open the chart page →

1,879
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
coreutils@9.1-1
no fix listed

Open the chart page →

2,710
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
coreutils@8.30-13.el8
0:8.30-20.el8_10

Open the chart page →

6,021
posthogzeet0.23.21 of 9See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.19.07a85f522c5bc
coreutils@8.30-13.el8
0:8.30-20.el8_10

Open the chart page →

3,700
changedetection-iozekker6Verified publisher1.101.01 of 1See more

changedetection-io zekker6 1.101.0

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.6eb4a9f718801
coreutils@9.1-1
no fix listed

Open the chart page →

2,649
NEW_APPzekker6Verified publisher0.0.01 of 1See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-56392.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
coreutils@9.7-3
no fix listed

Open the chart page →

1,879

Container images carrying it

1,782 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/keycloak/keycloak:26.0.6a93d22e13b86
coreutils@8.32-36.el9
0:8.32-41.el9_8.1
1
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
coreutils@8.30-13.el8
0:8.30-20.el8_10
1
quay.io/keycloak/keycloak-operator:19.0.3-legacy09d52508fee9
coreutils@8.30-12.el8
0:8.30-20.el8_10
1
quay.io/keycloak/keycloak-operator:19.0.2-legacy15fa0ed662b1
coreutils@8.30-12.el8
0:8.30-20.el8_10
1
quay.io/keycloak/keycloak-operator:18.0.0-legacy36ce77526145
coreutils@8.30-12.el8
0:8.30-20.el8_10
1
quay.io/keycloak/keycloak-operator:26.7.268b1e5805b99
coreutils@8.32-41.el9_8
0:8.32-41.el9_8.1
1
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
coreutils@8.30-13.el8
0:8.30-20.el8_10
1
quay.io/kiali/kiali:v1.89.30dcdb1c1e747
coreutils@8.30-15.el8
0:8.30-20.el8_10
1
quay.io/kiali/kiali:v2.23.07652b1285f50
coreutils@8.32-39.el9
0:8.32-41.el9_8.1
1
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
coreutils@8.30-15.el8
0:8.30-20.el8_10
1
quay.io/kuadrant/authorino-operator:v0.26.003b2acc469f4
coreutils@8.32-41.el9_8
0:8.32-41.el9_8.1
1
quay.io/kuadrant/authorino-operator:v0.25.395a0670bffe6
coreutils@8.32-41.el9_8
0:8.32-41.el9_8.1
1
quay.io/kubev2v/forklift-operator:release-2.1268657c36c086
coreutils@8.32-41.el9_8
0:8.32-41.el9_8.1
1
quay.io/kubevirt/kubemacpool:v0.45.0eebb65b8a12c
coreutils@8.32-36.el9
0:8.32-41.el9_8.1
1
quay.io/kubevirt/vm-console-proxy:v0.8.08d6b4b6e99bd
coreutils@8.32-36.el9
0:8.32-41.el9_8.1
1
quay.io/manusa/kubernetes_mcp_server:v0.0.47150f76e844d9
coreutils@8.32-39.el9
0:8.32-41.el9_8.1
1
quay.io/maximilianopizarro/custom-rhcl-console:dns-prober-v0.1.21a592ee6651a
coreutils@8.32-41.el9_8
0:8.32-41.el9_8.1
1
quay.io/maximilianopizarro/custom-rhcl-console:v0.1.270bb0cabd653
coreutils@8.32-41.el9_8
0:8.32-41.el9_8.1
1
quay.io/maximilianopizarro/integration-console-plugin:v0.8.2270ed23a9afd
coreutils@8.32-40.el9
0:8.32-41.el9_8.1
1
quay.io/maximilianopizarro/neuralbank-backend:latesta53899fcfc01
coreutils@8.32-39.el9
0:8.32-41.el9_8.1
1
quay.io/maximilianopizarro/neuralbank-frontend:latest5f4572ef6d6f
coreutils@8.32-39.el9
0:8.32-41.el9_8.1
1
quay.io/maximilianopizarro/neuroface-backend:v1.4.13194d46df0f9
coreutils@8.32-40.el9
0:8.32-41.el9_8.1
1
quay.io/maximilianopizarro/neuroface-backend:latestcba71dc08c8a
coreutils@8.32-40.el9
0:8.32-41.el9_8.1
1
quay.io/maximilianopizarro/neuroface-frontend:v1.4.1841b70cd1424
coreutils@8.32-39.el9
0:8.32-41.el9_8.1
1
quay.io/maximilianopizarro/neuroface-frontend:latestdcf24040cc77
coreutils@8.32-39.el9
0:8.32-41.el9_8.1
1
quay.io/maximilianopizarro/nfl-api-bills:1.0.1b596a4687bb0
coreutils@8.30-15.el8
0:8.30-20.el8_10
1
quay.io/maximilianopizarro/nfl-wallet-api-customers:1.0.1d50c80a85b35
coreutils@8.30-15.el8
0:8.30-20.el8_10
1
quay.io/maximilianopizarro/nfl-wallet-api-raiders:1.0.1f9c71dc2bc5f
coreutils@8.30-15.el8
0:8.30-20.el8_10
1
quay.io/maximilianopizarro/nfl-wallet-webapp:1.0.13fead5702be7
coreutils@8.30-17.el8_10
0:8.30-20.el8_10
1
quay.io/maximilianopizarro/openshift-integration-operator:v0.8.2d6fc43ac802e
coreutils@8.32-36.el9
0:8.32-41.el9_8.1
1
quay.io/maximilianopizarro/rhbk-neuroface-spi:latest2ba674f624b5
coreutils@8.32-39.el9
0:8.32-41.el9_8.1
1
quay.io/maximilianopizarro/showroom-docs-mcp:latest1a6eff92827a
coreutils@8.32-36.el9
0:8.32-41.el9_8.1
1
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
coreutils@8.30-12.el8
0:8.30-20.el8_10
1
quay.io/maxiv/mortalgpu:1.3.7e1c5c194bbf0
coreutils@8.32-39.el9
0:8.32-41.el9_8.1
1
quay.io/maxiv/pieeat:0.9.3099715479210
coreutils@9.7-3
no fix listed
1
quay.io/mcouliba/quarkus-serverless:1.0c2851757eca4
coreutils@8.30-6.el8_1.1
0:8.30-20.el8_10
1
quay.io/microcks/microcks-operator:0.0.1196d1054d4a61
coreutils@8.32-39.el9
0:8.32-41.el9_8.1
1
quay.io/minio/directpv:v4.0.84560083eb77d
coreutils@8.30-15.el8
0:8.30-20.el8_10
1
quay.io/minio/mc:RELEASE.2024-01-11T05-49-32Z026ae522febc
coreutils@8.32-34.el9
0:8.32-41.el9_8.1
1
quay.io/minio/mc:RELEASE.2022-10-20T23-26-33Z50ee58bc9770
coreutils@8.30-12.el8
0:8.30-20.el8_10
1
quay.io/minio/mc:RELEASE.2022-09-16T09-16-47Z546a8b52d7b0
coreutils@8.30-12.el8
0:8.30-20.el8_10
1
quay.io/minio/mc:RELEASE.2024-04-29T09-56-05Zc574fac67f60
coreutils@8.32-35.el9
0:8.32-41.el9_8.1
1
quay.io/minio/minio:RELEASE.2023-12-20T01-00-02Z5702ea361420
coreutils@8.32-34.el9
0:8.32-41.el9_8.1
1
quay.io/minio/minio:RELEASE.2024-01-11T07-46-16Z796f75ea413b
coreutils@8.32-34.el9
0:8.32-41.el9_8.1
1
quay.io/minio/minio:RELEASE.2022-09-17T00-09-45Zc3d20bc2ea08
coreutils@8.30-12.el8
0:8.30-20.el8_10
1
quay.io/minio/minio:RELEASE.2024-06-04T19-20-08Zc6b68f158628
coreutils@8.32-35.el9
0:8.32-41.el9_8.1
1
quay.io/minio/minio:RELEASE.2022-10-24T18-35-07Zd853057f2800
coreutils@8.30-12.el8
0:8.30-20.el8_10
1
quay.io/minio/operator:v7.1.1cd587f60c43d
coreutils@8.32-36.el9
0:8.32-41.el9_8.1
1
quay.io/mittwald/brudi-operator:v0.2.3edb322094359
coreutils@8.30-15.el8
0:8.30-20.el8_10
1
quay.io/mittwald/kube-httpcache:stable2169032c5840
coreutils@9.1-1
no fix listed
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.