CVE-2026-62574

High

Advisory

Published 17 Aug 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.8; base score, highest
EPSS: 0.001; 2nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 19; of 17,781 indexed, latest versions
Container images: 21; deployed by those charts
Fix available: 3 of 3; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 19 of 17,781 indexed charts deploy, on 21 images.

Affected package	Affected versions	Fixed in	Images
javabitnami	11.0.15-150, 11.0.18-10-1, 11.0.18-10-2, 11.0.20-8-3+12 more	1.8.0	16
Javabitnami	11.0.20-8, 11.0.21-10, 17.0.8-7, 17.0.10-13-1+2 more	1.8.0	7
jrebitnami	17.0.16-12-0, 17.0.19-11-2, 21.0.8-12-0, 21.0.9-15-0+1 more	1.8.0	5

OSV records: BIT-java-2026-62574 BIT-jre-2026-62574
Also known as: BIT-java-min-2026-62574

Charts affected

19 by stars

Chart

Latest

Affected images

Radar Score

tomcatbitnami

13.6.26

1 of 1 See more

tomcat bitnami 13.6.26

1 of the 1 container images this version deploys carry CVE-2026-62574.

Container image	Digest	Package	Fixed in
bitnami/tomcat :latest	113674f60814	jre@21.0.12-10-3	1.8.0

Open the chart page →

103

signozsignoz

0.141.1

1 of 5 See more

signoz signoz 0.141.1

1 of the 5 container images this version deploys carry CVE-2026-62574.

Container image	Digest	Package	Fixed in
signoz/zookeeper :3.7.1	fcc4a3288154	java@11.0.20-8-5 Java@11.0.20-8	1.8.0 1.8.0

Open the chart page →

7,568

thehivestrangebee-helm

1.0.6

2 of 7 See more

thehive strangebee-helm 1.0.6

2 of the 7 container images this version deploys carry CVE-2026-62574.

Container image	Digest	Package	Fixed in
bitnamilegacy/cassandra :4.1.7-debian-12-r3	2b7a217999a1	java@11.0.25-11-1	1.8.0
bitnamilegacy/elasticsearch :9.1.2-debian-12-r0	00176a47afa0	java@21.0.8-12-0	1.8.0

Open the chart page →

16,210

seafiledatamate

0.6.0

1 of 6 See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2026-62574.

Container image	Digest	Package	Fixed in
bitnamilegacy/elasticsearch :8.12.1-debian-11-r2	9cfd2df1294d	java@17.0.10-13-1 Java@17.0.10-13-1	1.8.0 1.8.0

Open the chart page →

27,267

kafka-chartsoldevelo-kafka-chart

32.4.4

1 of 1 See more

kafka-chart soldevelo-kafka-chart 32.4.4

1 of the 1 container images this version deploys carry CVE-2026-62574.

Container image	Digest	Package	Fixed in
soldevelo/kafka :4.0.0-debian-12-r0	cfdc08c2f577	jre@17.0.16-12-0	1.8.0

Open the chart page →

2,355

thingsboard-clusterthingsboard-cluster-betta

0.2.26

2 of 6 See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

2 of the 6 container images this version deploys carry CVE-2026-62574.

Container image	Digest	Package	Fixed in
bitnamilegacy/kafka :3.5.0-debian-11-r0	8657bb93a581	java@17.0.7-7-2	1.8.0
bitnamilegacy/zookeeper :3.9.0-debian-11-r11	10ed1ea3c8d1	java@11.0.20-8-3 Java@11.0.20-8	1.8.0 1.8.0

Open the chart page →

14,566

clearml-servingallegroai

1.6.2

2 of 9 See more

clearml-serving allegroai 1.6.2

2 of the 9 container images this version deploys carry CVE-2026-62574.

Container image	Digest	Package	Fixed in
bitnamilegacy/kafka :3.4.0-debian-11-r6	ac64829e45b3	java@11.0.18-10-2	1.8.0
bitnamilegacy/zookeeper :3.8.1-debian-11-r6	dba59d740e13	java@11.0.18-10-1	1.8.0

Open the chart page →

17,877

dbrepodbrepo

1.13.3

1 of 25 See more

dbrepo dbrepo 1.13.3

1 of the 25 container images this version deploys carry CVE-2026-62574.

Container image	Digest	Package	Fixed in
bitnamilegacy/opensearch :2.18.0-debian-12-r0	d8440eb6b290	java@17.0.13-12-1	1.8.0

Open the chart page →

52,635

clowder2ncsa

1.9.7

2 of 12 See more

clowder2 ncsa 1.9.7

2 of the 12 container images this version deploys carry CVE-2026-62574.

Container image	Digest	Package	Fixed in
bitnamilegacy/elasticsearch :8.12.2	15d4647fd491	java@17.0.10-13-2 Java@17.0.10-13-2	1.8.0 1.8.0
bitnamilegacy/keycloak :20.0.5	cb04e49e6eb1	java@17.0.6-10-4	1.8.0

Open the chart page →

37,373

clickhousesignoz

24.1.18

1 of 3 See more

clickhouse signoz 24.1.18

1 of the 3 container images this version deploys carry CVE-2026-62574.

Container image	Digest	Package	Fixed in
signoz/zookeeper :3.7.1	fcc4a3288154	java@11.0.20-8-5 Java@11.0.20-8	1.8.0 1.8.0

Open the chart page →

4,695

active-mqactivemq-helm-chart

1.8.2

1 of 3 See more

active-mq activemq-helm-chart 1.8.2

1 of the 3 container images this version deploys carry CVE-2026-62574.

Container image	Digest	Package	Fixed in
bitnami/jmx-exporterdigest-pinned	9cc4a173c69e	jre@17.0.19-11-2	1.8.0

Open the chart page →

3,188

arlas-aiasarlas-stack

28.8.0

2 of 22 See more

arlas-aias arlas-stack 28.8.0

2 of the 22 container images this version deploys carry CVE-2026-62574.

Container image	Digest	Package	Fixed in
bitnamilegacy/elasticsearch :9.0.1-debian-12-r0	e6f6ddcce2f1	java@21.0.7-9-0	1.8.0
bitnamilegacy/keycloak :26.3.3-debian-12-r0	da3df0976a9f	jre@21.0.8-12-0	1.8.0

Open the chart page →

40,238

axelor-open-suiteaxelor-open-suite

7.2.58

1 of 2 See more

axelor-open-suite axelor-open-suite 7.2.58

1 of the 2 container images this version deploys carry CVE-2026-62574.

Container image	Digest	Package	Fixed in
pmoscode/axelor-open-suite :v7.2.57	a58f4d762f5c	java@17.0.8-7-5 Java@17.0.8-7	1.8.0 1.8.0

Open the chart page →

9,722

daveit-at-m

0.2.15

1 of 11 See more

dave it-at-m 0.2.15

1 of the 11 container images this version deploys carry CVE-2026-62574.

Container image	Digest	Package	Fixed in
bitnamilegacy/elasticsearch :9.1.2-debian-12-r0	00176a47afa0	java@21.0.8-12-0	1.8.0

Open the chart page →

15,089

backendmojaloop

0.1.0

2 of 6 See more

backend mojaloop 0.1.0

2 of the 6 container images this version deploys carry CVE-2026-62574.

Container image	Digest	Package	Fixed in
bitnamilegacy/kafka :2.8.1-debian-11-r7	b6e381ffd6ae	java@11.0.15-150	1.8.0
bitnamilegacy/zookeeper :3.7.2-debian-11-r5	cbf54314c401	java@11.0.21-10-6 Java@11.0.21-10	1.8.0 1.8.0

Open the chart page →

16,198

incorencsa

1.38.0

1 of 29 See more

incore ncsa 1.38.0

1 of the 29 container images this version deploys carry CVE-2026-62574.

Container image	Digest	Package	Fixed in
bitnamilegacy/keycloak :24.0.4	cc599cbd15ff	java@17.0.11-12-0 Java@17.0.11-12-0	1.8.0 1.8.0

Open the chart page →

15,369

zookeepersignoz

0.0.1

1 of 1 See more

zookeeper signoz 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-62574.

Container image	Digest	Package	Fixed in
signoz/zookeeper :3.7.1	fcc4a3288154	java@11.0.20-8-5 Java@11.0.20-8	1.8.0 1.8.0

Open the chart page →

2,917

drillwearefrank

1.3.6

1 of 3 See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2026-62574.

Container image	Digest	Package	Fixed in
bitnamilegacy/zookeeper :3.9.0-debian-11-r11	10ed1ea3c8d1	java@11.0.20-8-3 Java@11.0.20-8	1.8.0 1.8.0

Open the chart page →

9,397

keycloakwiremind

25.3.1

1 of 2 See more

keycloak wiremind 25.3.1

1 of the 2 container images this version deploys carry CVE-2026-62574.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/keycloak :26.5.0-debian-12-r3	8622ea9e43c0	jre@21.0.9-15-0	1.8.0

Open the chart page →

7,624

Container images carrying it

21 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
signoz/zookeeper :3.7.1	fcc4a3288154	java@11.0.20-8-5 Java@11.0.20-8	1.8.0 1.8.0	3
bitnamilegacy/elasticsearch :9.1.2-debian-12-r0	00176a47afa0	java@21.0.8-12-0	1.8.0	2
bitnamilegacy/zookeeper :3.9.0-debian-11-r11	10ed1ea3c8d1	java@11.0.20-8-3 Java@11.0.20-8	1.8.0 1.8.0	2
bitnami/jmx-exporter	9cc4a173c69e	jre@17.0.19-11-2	1.8.0	1
bitnamilegacy/cassandra :4.1.7-debian-12-r3	2b7a217999a1	java@11.0.25-11-1	1.8.0	1
bitnamilegacy/elasticsearch :8.12.2	15d4647fd491	java@17.0.10-13-2 Java@17.0.10-13-2	1.8.0 1.8.0	1
bitnamilegacy/elasticsearch :8.12.1-debian-11-r2	9cfd2df1294d	java@17.0.10-13-1 Java@17.0.10-13-1	1.8.0 1.8.0	1
bitnamilegacy/elasticsearch :9.0.1-debian-12-r0	e6f6ddcce2f1	java@21.0.7-9-0	1.8.0	1
bitnamilegacy/kafka :3.5.0-debian-11-r0	8657bb93a581	java@17.0.7-7-2	1.8.0	1
bitnamilegacy/kafka :3.4.0-debian-11-r6	ac64829e45b3	java@11.0.18-10-2	1.8.0	1
bitnamilegacy/kafka :2.8.1-debian-11-r7	b6e381ffd6ae	java@11.0.15-150	1.8.0	1
bitnamilegacy/keycloak :20.0.5	cb04e49e6eb1	java@17.0.6-10-4	1.8.0	1
bitnamilegacy/keycloak :24.0.4	cc599cbd15ff	java@17.0.11-12-0 Java@17.0.11-12-0	1.8.0 1.8.0	1
bitnamilegacy/keycloak :26.3.3-debian-12-r0	da3df0976a9f	jre@21.0.8-12-0	1.8.0	1
bitnamilegacy/opensearch :2.18.0-debian-12-r0	d8440eb6b290	java@17.0.13-12-1	1.8.0	1
bitnamilegacy/zookeeper :3.7.2-debian-11-r5	cbf54314c401	java@11.0.21-10-6 Java@11.0.21-10	1.8.0 1.8.0	1
bitnamilegacy/zookeeper :3.8.1-debian-11-r6	dba59d740e13	java@11.0.18-10-1	1.8.0	1
bitnami/tomcat :latest	113674f60814	jre@21.0.12-10-3	1.8.0	1
pmoscode/axelor-open-suite :v7.2.57	a58f4d762f5c	java@17.0.8-7-5 Java@17.0.8-7	1.8.0 1.8.0	1
soldevelo/kafka :4.0.0-debian-12-r0	cfdc08c2f577	jre@17.0.16-12-0	1.8.0	1
ghcr.io/wiremind/bitnami/keycloak :26.5.0-debian-12-r3	8622ea9e43c0	jre@21.0.9-15-0	1.8.0	1