StackRadar

CVE-2026-6949

Medium

Advisory

Published 28 Jul 2026In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
29
of 17,781 indexed, latest versions
Container images
25
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 29 of 17,781 indexed charts deploy, on 25 images.

Affected packageAffected versionsFixed inImages
sambadeb2:2.6.2+samba4.17.12+dfsg-0+deb12u1, 2:2.6.2+samba4.17.12+dfsg-0+deb12u4, 2:2.8.0+samba4.19.5+dfsg-4ubuntu9, 2:2.11.0+samba4.22.8+dfsg-0+deb13u1+13 more2:4.15.13+dfsg-0ubuntu1.13, 2:4.19.5+dfsg-4ubuntu9.7, 2:4.22.10+dfsg-0+deb13u2, 2:4.23.6+dfsg-1ubuntu2.225
OSV records
UBUNTU-CVE-2026-6949DEBIAN-CVE-2026-6949
Also known as
USN-8621-1

Charts affected

29 by stars
ChartLatestAffected imagesRadar Score
csi-driver-smbcsi-driver-smbVerified publisher1.20.31 of 6See more

csi-driver-smb csi-driver-smb 1.20.3

1 of the 6 container images this version deploys carry CVE-2026-6949.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
samba@2:4.17.12+dfsg-0+deb12u4
no fix listed

Open the chart page →

2,945
photoprismandrenarchyVerified publisher8.15.01 of 1See more

photoprism andrenarchy 8.15.0

1 of the 1 container images this version deploys carry CVE-2026-6949.

Container imageDigestPackageFixed in
photoprism/photoprism:260728958642220223
samba@2:2.11.0+samba4.23.6+dfsg-1ubuntu2.1
2:4.23.6+dfsg-1ubuntu2.2

Open the chart page →

8,825
freeradiusstartechnicaVerified publisher1.2.01 of 1See more

freeradius startechnica 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-6949.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.2.8af6fd34a5b78
samba@2:4.15.13+dfsg-0ubuntu1.7
2:4.15.13+dfsg-0ubuntu1.13

Open the chart page →

5,751
powershelluniversaldigitalhubVerified publisher0.1.21 of 1See more

powershelluniversal digitalhub 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-6949.

Container imageDigestPackageFixed in
ironmansoftware/universal:3.3.1-ubuntu-20.041943c73cce31
samba@2:4.13.17~dfsg-0ubuntu1.20.04.1
no fix listed

Open the chart page →

6,940
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-6949.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
samba@2:4.17.12+dfsg-0+deb12u1
no fix listed

Open the chart page →

11,458
owncloudkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 3See more

owncloud kubernetes-homelab-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-6949.

Container imageDigestPackageFixed in
owncloud/server:10.16.274c53d341076
samba@2:4.15.13+dfsg-0ubuntu1.12
2:4.15.13+dfsg-0ubuntu1.13

Open the chart page →

9,858
music-assistant-serverlmatfyVerified publisher0.1.91 of 1See more

music-assistant-server lmatfy 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-6949.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
samba@2:4.17.12+dfsg-0+deb12u3
no fix listed

Open the chart page →

7,201
music-assistant-serverandibraeuVerified publisher2.1.21 of 1See more

music-assistant-server andibraeu 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-6949.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
samba@2:4.17.12+dfsg-0+deb12u4
no fix listed

Open the chart page →

5,817
ms-emails-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-6949.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-grpc:lateste336012bc781
samba@2:2.6.2+samba4.17.12+dfsg-0+deb12u4
no fix listed

Open the chart page →

9,367
ms-emails-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-6949.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-rest:latestac84661c605e
samba@2:2.6.2+samba4.17.12+dfsg-0+deb12u4
no fix listed

Open the chart page →

9,367
csi-driver-smbdeimosfr-charts1.20.31 of 5See more

csi-driver-smb deimosfr-charts 1.20.3

1 of the 5 container images this version deploys carry CVE-2026-6949.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
samba@2:4.17.12+dfsg-0+deb12u4
no fix listed

Open the chart page →

2,945
ownclouddjjudas21Verified publisher0.3.231 of 3See more

owncloud djjudas21 0.3.23

1 of the 3 container images this version deploys carry CVE-2026-6949.

Container imageDigestPackageFixed in
owncloud/server:10.16.3b3f9efdcd7f7
samba@2:4.15.13+dfsg-0ubuntu1.12
2:4.15.13+dfsg-0ubuntu1.13

Open the chart page →

10,035
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2026-6949.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
samba@2:2.8.0+samba4.19.5+dfsg-4ubuntu9
2:4.19.5+dfsg-4ubuntu9.7

Open the chart page →

16,954
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-6949.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
samba@2:4.15.13+dfsg-0ubuntu0.20.04.8
no fix listed

Open the chart page →

64,489
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2026-6949.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
samba@2:4.19.5+dfsg-4ubuntu9.3
2:4.19.5+dfsg-4ubuntu9.7

Open the chart page →

5,292
icinga2geek-cookbookVerified publisher4.2.01 of 1See more

icinga2 geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-6949.

Container imageDigestPackageFixed in
jordan/icinga2:latestf75025fe8ea8
samba@2:2.6.2+samba4.17.12+dfsg-0+deb12u4
no fix listed

Open the chart page →

9,077
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2026-6949.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
samba@2:2.11.0+samba4.22.8+dfsg-0+deb13u1
2:4.22.10+dfsg-0+deb13u2

Open the chart page →

29,817
music-assistantkarljorgensen0.1.31 of 1See more

music-assistant karljorgensen 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-6949.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
samba@2:4.17.12+dfsg-0+deb12u3
no fix listed

Open the chart page →

7,081
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-6949.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
samba@2:2.6.2+samba4.17.12+dfsg-0+deb12u1
no fix listed

Open the chart page →

37,942
cdn-remoteopencord0.2.41 of 3See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2026-6949.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:1.0.0d59ccb138ffb
samba@2:4.3.11+dfsg-0ubuntu0.16.04.18
no fix listed

Open the chart page →

63,223
freeradiusopencord1.0.41 of 1See more

freeradius opencord 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-6949.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.0.2121c8bfa904d8
samba@2:4.7.6+dfsg~ubuntu-0ubuntu2.15
no fix listed

Open the chart page →

15,702
mcord-cdn-remoteopencord0.1.61 of 2See more

mcord-cdn-remote opencord 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-6949.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
samba@2:4.3.11+dfsg-0ubuntu0.16.04.18
no fix listed

Open the chart page →

42,614
mcord-cdn-remote-freeopencord0.1.31 of 1See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-6949.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
samba@2:4.3.11+dfsg-0ubuntu0.16.04.18
no fix listed

Open the chart page →

29,124
voltha-infraopencord2.14.01 of 10See more

voltha-infra opencord 2.14.0

1 of the 10 container images this version deploys carry CVE-2026-6949.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.0.2121c8bfa904d8
samba@2:4.7.6+dfsg~ubuntu-0ubuntu2.15
no fix listed

Open the chart page →

41,044
checkmkrtomik-helm-chartsVerified publisher0.1.01 of 1See more

checkmk rtomik-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-6949.

Container imageDigestPackageFixed in
checkmk/check-mk-community:2.5.0p6c11b422210c4
samba@2:4.15.13+dfsg-0ubuntu1.12
2:4.15.13+dfsg-0ubuntu1.13

Open the chart page →

7,436
vrisingryuunosukeds30.1.01 of 1See more

vrising ryuunosukeds3 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-6949.

Container imageDigestPackageFixed in
trueosiris/vrising:latest9356f98ad561
samba@2:4.15.13+dfsg-0ubuntu1.10
2:4.15.13+dfsg-0ubuntu1.13

Open the chart page →

7,295
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-6949.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
samba@2:2.11.0+samba4.23.6+dfsg-1ubuntu2.1
2:4.23.6+dfsg-1ubuntu2.2

Open the chart page →

10,348
freeradiussvtech-public-helm-charts0.1.51 of 4See more

freeradius svtech-public-helm-charts 0.1.5

1 of the 4 container images this version deploys carry CVE-2026-6949.

Container imageDigestPackageFixed in
ptthanh1511/freeradius-server:3.0.26-netdebug5741cbde85ab
samba@2:4.13.17~dfsg-0ubuntu1.20.04.1
no fix listed

Open the chart page →

12,655
owncloudth-chartsVerified publisher0.2.11 of 1See more

owncloud th-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-6949.

Container imageDigestPackageFixed in
owncloud/server:10.15.051d9b74fc2a8
samba@2:4.15.13+dfsg-0ubuntu0.20.04.7
no fix listed

Open the chart page →

10,006

Container images carrying it

25 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
omecproject/cdn-video-repo:1.0.0:remote-v3d59ccb138ffb
samba@2:4.3.11+dfsg-0ubuntu0.16.04.18
no fix listed
3
freeradius/freeradius-server:3.0.2121c8bfa904d8
samba@2:4.7.6+dfsg~ubuntu-0ubuntu2.15
no fix listed
2
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
samba@2:4.17.12+dfsg-0+deb12u4
no fix listed
2
checkmk/check-mk-community:2.5.0p6c11b422210c4
samba@2:4.15.13+dfsg-0ubuntu1.12
2:4.15.13+dfsg-0ubuntu1.13
1
codedesignplus/ms-emails-grpc:lateste336012bc781
samba@2:2.6.2+samba4.17.12+dfsg-0+deb12u4
no fix listed
1
codedesignplus/ms-emails-rest:latestac84661c605e
samba@2:2.6.2+samba4.17.12+dfsg-0+deb12u4
no fix listed
1
cybrarist/discount-bandit:v4.0.4e9e2447ac666
samba@2:2.11.0+samba4.22.8+dfsg-0+deb13u1
2:4.22.10+dfsg-0+deb13u2
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
samba@2:4.15.13+dfsg-0ubuntu0.20.04.8
no fix listed
1
flanksource/batch-runner:v1.0.44689687a7cf95
samba@2:4.19.5+dfsg-4ubuntu9.3
2:4.19.5+dfsg-4ubuntu9.7
1
freeradius/freeradius-server:3.2.8af6fd34a5b78
samba@2:4.15.13+dfsg-0ubuntu1.7
2:4.15.13+dfsg-0ubuntu1.13
1
ironmansoftware/universal:3.3.1-ubuntu-20.041943c73cce31
samba@2:4.13.17~dfsg-0ubuntu1.20.04.1
no fix listed
1
jordan/icinga2:latestf75025fe8ea8
samba@2:2.6.2+samba4.17.12+dfsg-0+deb12u4
no fix listed
1
owncloud/server:10.15.051d9b74fc2a8
samba@2:4.15.13+dfsg-0ubuntu0.20.04.7
no fix listed
1
owncloud/server:10.16.274c53d341076
samba@2:4.15.13+dfsg-0ubuntu1.12
2:4.15.13+dfsg-0ubuntu1.13
1
owncloud/server:10.16.3b3f9efdcd7f7
samba@2:4.15.13+dfsg-0ubuntu1.12
2:4.15.13+dfsg-0ubuntu1.13
1
photoprism/photoprism:260601650c6ad5a651
samba@2:2.11.0+samba4.23.6+dfsg-1ubuntu2.1
2:4.23.6+dfsg-1ubuntu2.2
1
photoprism/photoprism:260728958642220223
samba@2:2.11.0+samba4.23.6+dfsg-1ubuntu2.1
2:4.23.6+dfsg-1ubuntu2.2
1
photoprism/photoprism:240711-cefc6fd632ca74
samba@2:2.8.0+samba4.19.5+dfsg-4ubuntu9
2:4.19.5+dfsg-4ubuntu9.7
1
ptthanh1511/freeradius-server:3.0.26-netdebug5741cbde85ab
samba@2:4.13.17~dfsg-0ubuntu1.20.04.1
no fix listed
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
samba@2:2.6.2+samba4.17.12+dfsg-0+deb12u1
no fix listed
1
trueosiris/vrising:latest9356f98ad561
samba@2:4.15.13+dfsg-0ubuntu1.10
2:4.15.13+dfsg-0ubuntu1.13
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
samba@2:4.17.12+dfsg-0+deb12u1
no fix listed
1
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
samba@2:4.17.12+dfsg-0+deb12u3
no fix listed
1
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
samba@2:4.17.12+dfsg-0+deb12u4
no fix listed
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
samba@2:4.17.12+dfsg-0+deb12u3
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.