CVE-2026-78408
HighAdvisory
Published 2 Sept 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.9
- base score, highest
- EPSS
- 0.001
- 2nd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 2,789
- of 17,805 indexed, latest versions
- Container images
- 2,754
- deployed by those charts
- Fix available
- 2 of 3
- affected packages
CVE-2026-78408 affecting package util-linux 2.40.2-5
Carried by container images the latest versions of 2,789 of 17,805 indexed charts deploy, on 2,754 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| util-linuxdeb | 1:2.27.1-6ubuntu3.3, 1:2.38.1-5+deb12u1, 1:2.41.5-0+deb13u1+dhi3, 1:4.16.0-2+really2.41-5+47 more | 2.41.5-0+deb13u1+e2 | 2,477 |
| util-linuxapk | 2.41-r9, 2.41.2-r0, 2.41.4-r0, 2.42-r0+1 more | 2.41.6-r1, 2.42.3-r1 | 276 |
| util-linuxrpm | 2.40.2-4.azl3 | no fix listed | 1 |
Charts affected
2,789 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| mywebhelmchartwebapp | 0.0.5 | 1 of 1See more | 1,736 |
| my-apphelm-demo8564 | 0.2.7 | 1 of 2See more | 1,885 |
| chart-bookhelm-deploy-book | 0.1.0 | 1 of 3See more | 9,117 |
| affinehelmforgeVerified publisher | 1.0.0 | 3 of 3See more | 4,189 |
| alfiohelmforgeVerified publisher | 1.2.12 | 1 of 3See more | 2,153 |
| apachehelmforgeVerified publisher | 1.0.6 | 1 of 1See more | 1,736 |
| appwritehelmforgeVerified publisher | 2.0.0 | 3 of 5See more | 4,782 |
| archiveboxhelmforgeVerified publisher | 1.1.12 | 1 of 1See more | 7,705 |
| automatischhelmforgeVerified publisher | 1.3.7 | 2 of 4See more | 6,043 |
| booklorehelmforgeVerified publisher | 2.0.1 | 1 of 3See more | 2,356 |
| castopodhelmforgeVerified publisher | 1.2.7 | 2 of 3See more | 9,594 |
| changedetectionhelmforgeVerified publisher | 1.1.16 | 1 of 1See more | 2,687 |
| chiefonboardinghelmforgeVerified publisher | 1.1.15 | 2 of 3See more | 7,280 |
| ckanhelmforgeVerified publisher | 1.3.8 | 4 of 6See more | 10,143 |
| clickhousehelmforgeVerified publisher | 2.0.2 | 1 of 1See more | 1,634 |
| countlyhelmforgeVerified publisher | 1.2.6 | 2 of 3See more | 73,824 |
| dawarichhelmforgeVerified publisher | 1.0.1 | 3 of 4See more | 10,648 |
| discount-bandithelmforgeVerified publisher | 2.0.8 | 1 of 3See more | 30,503 |
| druidhelmforgeVerified publisher | 1.3.6 | 3 of 4See more | 8,776 |
| drupalhelmforgeVerified publisher | 1.2.13 | 1 of 2See more | 3,925 |
| entehelmforgeVerified publisher | 1.0.2 | 2 of 4See more | 4,328 |
| fastmcp-serverhelmforgeVerified publisher | 1.7.4 | 1 of 1See more | 3,379 |
| generichelmforgeVerified publisher | 3.1.5 | 1 of 1See more | 1,885 |
| ghosthelmforgeVerified publisher | 1.2.7 | 1 of 3See more | 2,525 |
| heimdallhelmforgeVerified publisher | 1.1.14 | 1 of 1See more | 438 |
| hoppscotchhelmforgeVerified publisher | 1.1.11 | 1 of 2See more | 2,144 |
| immichhelmforgeVerified publisher | 1.2.8 | 4 of 5See more | 11,296 |
| jenkinshelmforgeVerified publisher | 1.0.9 | 1 of 1See more | 2,545 |
| jupyterhubhelmforgeVerified publisher | 1.0.6 | 1 of 3See more | 5,546 |
| komgahelmforgeVerified publisher | 1.4.15 | 1 of 1See more | 34,712 |
| listmonkhelmforgeVerified publisher | 1.1.14 | 2 of 3See more | 2,902 |
| matterbridgehelmforgeVerified publisher | 1.0.3 | 1 of 1See more | 947 |
| mcp-serverhelmforgeVerified publisher | 1.0.0 | 1 of 1See more | 3,528 |
| medikeephelmforgeVerified publisher | 2.0.1 | 2 of 3See more | 5,537 |
| memcachedhelmforgeVerified publisher | 1.0.8 | 1 of 1See more | 1,102 |
| metabasehelmforgeVerified publisher | 1.2.29 | 1 of 3See more | 1,715 |
| middlewarehelmforgeVerified publisher | 1.2.6 | 3 of 4See more | 9,884 |
| minecrafthelmforgeVerified publisher | 1.5.4 | 1 of 1See more | 4,216 |
| mongodbhelmforgeVerified publisher | 1.8.1 | 1 of 1See more | 987 |
| moodlehelmforgeVerified publisher | 1.1.0 | 2 of 2See more | 6,369 |
| netboxhelmforgeVerified publisher | 2.0.1 | 3 of 4See more | 4,457 |
| nextcloudhelmforgeVerified publisher | 1.1.0 | 3 of 3See more | 5,717 |
| notediscoveryhelmforgeVerified publisher | 2.0.1 | 1 of 1See more | 1,308 |
| opencloudhelmforgeVerified publisher | 1.0.0 | 1 of 1See more | 678 |
| opencuthelmforgeVerified publisher | 1.1.9 | 2 of 5See more | 3,842 |
| openreel-videohelmforgeVerified publisher | 1.0.3 | 1 of 1See more | 1,083 |
| paprahelmforgeVerified publisher | 1.0.0 | 1 of 1See more | 2,603 |
| phpmyadminhelmforgeVerified publisher | 2.0.1 | 1 of 1See more | 4,873 |
| pimcorehelmforgeVerified publisher | 2.0.1 | 2 of 6See more | 3,258 |
| qdranthelmforgeVerified publisher | 1.0.5 | 1 of 1See more | 857 |
Container images carrying it
2,754 by charts deploying them
A fixed version is listed for 2 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | c2d6e775db5a | util-linux | no fix listed | 1 |
| ghcr.io/ | 0eb230e2381a | util-linux | no fix listed | 1 |
| ghcr.io/ | 4ea617c30397 | util-linux | no fix listed | 1 |
| ghcr.io/ | 6011182e3946 | util-linux | no fix listed | 1 |
| ghcr.io/ | 448045c4270b | util-linux | no fix listed | 1 |
| ghcr.io/ | 292b3614670f | util-linux | no fix listed | 1 |
| ghcr.io/ | 779858b5e11d | util-linux | no fix listed | 1 |
| ghcr.io/ | 3c20900b5381 | util-linux | no fix listed | 1 |
| ghcr.io/ | b2136983532b | util-linux | no fix listed | 1 |
| ghcr.io/ | 4ed7a896dd2b | util-linux | no fix listed | 1 |
| ghcr.io/ | abd7d6b11b1b | util-linux | 2.41.6-r1 | 1 |
| ghcr.io/ | b069e4307dec | util-linux | no fix listed | 1 |
| ghcr.io/ | f575a34ed3f8 | util-linux | 2.41.6-r1 | 1 |
| ghcr.io/ | 708446bc6783 | util-linux | 2.41.6-r1 | 1 |
| ghcr.io/ | 2c69513f9d85 | util-linux | no fix listed | 1 |
| ghcr.io/ | a23b389cb3c5 | util-linux | no fix listed | 1 |
| ghcr.io/ | bcf42ccda0f9 | util-linux | 2.41.6-r1 | 1 |
| ghcr.io/ | f52e66eff50b | util-linux | no fix listed | 1 |
| ghcr.io/ | 00a3d8e1f04b | util-linux | 2.42.3-r1 | 1 |
| ghcr.io/ | 865ff4da5686 | util-linux | no fix listed | 1 |
| ghcr.io/ | b66aba320083 | util-linux | no fix listed | 1 |
| ghcr.io/ | 8ab954711fb9 | util-linux | no fix listed | 1 |
| ghcr.io/ | 43e1085cd0a8 | util-linux | no fix listed | 1 |
| ghcr.io/ | afe3bd73d7cf | util-linux | no fix listed | 1 |
| ghcr.io/ | 7280594a2f18 | util-linux | no fix listed | 1 |
| ghcr.io/ | e25056a6ec52 | util-linux | no fix listed | 1 |
| ghcr.io/ | b599ca6b3ff3 | util-linux | no fix listed | 1 |
| ghcr.io/ | 9bc37ed78a8b | util-linux | no fix listed | 1 |
| ghcr.io/ | e9609bd50416 | util-linux | no fix listed | 1 |
| ghcr.io/ | 8978aa002bc0 | util-linux | no fix listed | 1 |
| ghcr.io/ | 1a27e11e5925 | util-linux | no fix listed | 1 |
| ghcr.io/ | ff5a36a457f1 | util-linux | no fix listed | 1 |
| ghcr.io/ | bcd8e9a6224f | util-linux | no fix listed | 1 |
| ghcr.io/ | 7826e9caa461 | util-linux | no fix listed | 1 |
| ghcr.io/ | 3feb9da85270 | util-linux | no fix listed | 1 |
| ghcr.io/ | 41c603a93642 | util-linux | no fix listed | 1 |
| ghcr.io/ | 757bdd779345 | util-linux | no fix listed | 1 |
| ghcr.io/ | b5ade0d9cc6b | util-linux | no fix listed | 1 |
| ghcr.io/ | ebdf55fd5705 | util-linux | 2.41.6-r1 | 1 |
| ghcr.io/ | 24efef013a53 | util-linux | no fix listed | 1 |
| ghcr.io/ | e28e0e7de11b | util-linux | no fix listed | 1 |
| ghcr.io/ | 01563adc95fd | util-linux | no fix listed | 1 |
| ghcr.io/ | 2b92df1143b9 | util-linux | no fix listed | 1 |
| ghcr.io/ | 600221f0f43f | util-linux | no fix listed | 1 |
| ghcr.io/ | a85e03d8bc1d | util-linux | no fix listed | 1 |
| ghcr.io/ | 0c7896f060d6 | util-linux | no fix listed | 1 |
| ghcr.io/ | 099e1abd6d08 | util-linux | no fix listed | 1 |
| ghcr.io/ | 3d2eceb44a3b | util-linux | no fix listed | 1 |
| ghcr.io/ | ed86db9f0efe | util-linux | no fix listed | 1 |
| ghcr.io/ | 3c98b92e9535 | util-linux | no fix listed | 1 |