CVE-2026-78408
HighAdvisory
Published 2 Sept 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.9
- base score, highest
- EPSS
- 0.001
- 2nd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 2,789
- of 17,805 indexed, latest versions
- Container images
- 2,754
- deployed by those charts
- Fix available
- 2 of 3
- affected packages
CVE-2026-78408 affecting package util-linux 2.40.2-5
Carried by container images the latest versions of 2,789 of 17,805 indexed charts deploy, on 2,754 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| util-linuxdeb | 1:2.27.1-6ubuntu3.3, 1:2.38.1-5+deb12u1, 1:2.41.5-0+deb13u1+dhi3, 1:4.16.0-2+really2.41-5+47 more | 2.41.5-0+deb13u1+e2 | 2,477 |
| util-linuxapk | 2.41-r9, 2.41.2-r0, 2.41.4-r0, 2.42-r0+1 more | 2.41.6-r1, 2.42.3-r1 | 276 |
| util-linuxrpm | 2.40.2-4.azl3 | no fix listed | 1 |
Charts affected
2,789 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| mywebhelmchartwebapp | 0.0.5 | 1 of 1See more | 1,736 |
| my-apphelm-demo8564 | 0.2.7 | 1 of 2See more | 1,885 |
| chart-bookhelm-deploy-book | 0.1.0 | 1 of 3See more | 9,117 |
| affinehelmforgeVerified publisher | 1.0.0 | 3 of 3See more | 4,189 |
| alfiohelmforgeVerified publisher | 1.2.12 | 1 of 3See more | 2,153 |
| apachehelmforgeVerified publisher | 1.0.6 | 1 of 1See more | 1,736 |
| appwritehelmforgeVerified publisher | 2.0.0 | 3 of 5See more | 4,782 |
| archiveboxhelmforgeVerified publisher | 1.1.12 | 1 of 1See more | 7,705 |
| automatischhelmforgeVerified publisher | 1.3.7 | 2 of 4See more | 6,043 |
| booklorehelmforgeVerified publisher | 2.0.1 | 1 of 3See more | 2,356 |
| castopodhelmforgeVerified publisher | 1.2.7 | 2 of 3See more | 9,594 |
| changedetectionhelmforgeVerified publisher | 1.1.16 | 1 of 1See more | 2,687 |
| chiefonboardinghelmforgeVerified publisher | 1.1.15 | 2 of 3See more | 7,280 |
| ckanhelmforgeVerified publisher | 1.3.8 | 4 of 6See more | 10,143 |
| clickhousehelmforgeVerified publisher | 2.0.2 | 1 of 1See more | 1,634 |
| countlyhelmforgeVerified publisher | 1.2.6 | 2 of 3See more | 73,824 |
| dawarichhelmforgeVerified publisher | 1.0.1 | 3 of 4See more | 10,648 |
| discount-bandithelmforgeVerified publisher | 2.0.8 | 1 of 3See more | 30,503 |
| druidhelmforgeVerified publisher | 1.3.6 | 3 of 4See more | 8,776 |
| drupalhelmforgeVerified publisher | 1.2.13 | 1 of 2See more | 3,925 |
| entehelmforgeVerified publisher | 1.0.2 | 2 of 4See more | 4,328 |
| fastmcp-serverhelmforgeVerified publisher | 1.7.4 | 1 of 1See more | 3,379 |
| generichelmforgeVerified publisher | 3.1.5 | 1 of 1See more | 1,885 |
| ghosthelmforgeVerified publisher | 1.2.7 | 1 of 3See more | 2,525 |
| heimdallhelmforgeVerified publisher | 1.1.14 | 1 of 1See more | 438 |
| hoppscotchhelmforgeVerified publisher | 1.1.11 | 1 of 2See more | 2,144 |
| immichhelmforgeVerified publisher | 1.2.8 | 4 of 5See more | 11,296 |
| jenkinshelmforgeVerified publisher | 1.0.9 | 1 of 1See more | 2,545 |
| jupyterhubhelmforgeVerified publisher | 1.0.6 | 1 of 3See more | 5,546 |
| komgahelmforgeVerified publisher | 1.4.15 | 1 of 1See more | 34,712 |
| listmonkhelmforgeVerified publisher | 1.1.14 | 2 of 3See more | 2,902 |
| matterbridgehelmforgeVerified publisher | 1.0.3 | 1 of 1See more | 947 |
| mcp-serverhelmforgeVerified publisher | 1.0.0 | 1 of 1See more | 3,528 |
| medikeephelmforgeVerified publisher | 2.0.1 | 2 of 3See more | 5,537 |
| memcachedhelmforgeVerified publisher | 1.0.8 | 1 of 1See more | 1,102 |
| metabasehelmforgeVerified publisher | 1.2.29 | 1 of 3See more | 1,715 |
| middlewarehelmforgeVerified publisher | 1.2.6 | 3 of 4See more | 9,884 |
| minecrafthelmforgeVerified publisher | 1.5.4 | 1 of 1See more | 4,216 |
| mongodbhelmforgeVerified publisher | 1.8.1 | 1 of 1See more | 987 |
| moodlehelmforgeVerified publisher | 1.1.0 | 2 of 2See more | 6,369 |
| netboxhelmforgeVerified publisher | 2.0.1 | 3 of 4See more | 4,457 |
| nextcloudhelmforgeVerified publisher | 1.1.0 | 3 of 3See more | 5,717 |
| notediscoveryhelmforgeVerified publisher | 2.0.1 | 1 of 1See more | 1,308 |
| opencloudhelmforgeVerified publisher | 1.0.0 | 1 of 1See more | 678 |
| opencuthelmforgeVerified publisher | 1.1.9 | 2 of 5See more | 3,842 |
| openreel-videohelmforgeVerified publisher | 1.0.3 | 1 of 1See more | 1,083 |
| paprahelmforgeVerified publisher | 1.0.0 | 1 of 1See more | 2,603 |
| phpmyadminhelmforgeVerified publisher | 2.0.1 | 1 of 1See more | 4,873 |
| pimcorehelmforgeVerified publisher | 2.0.1 | 2 of 6See more | 3,258 |
| qdranthelmforgeVerified publisher | 1.0.5 | 1 of 1See more | 857 |
Container images carrying it
2,754 by charts deploying them
A fixed version is listed for 2 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | 3d0f1ddeebf5 | util-linux | no fix listed | 1 |
| ghcr.io/ | ce1132261523 | util-linux | no fix listed | 1 |
| ghcr.io/ | 7f91594d5eb3 | util-linux | 2.41.6-r1 | 1 |
| ghcr.io/ | 1269d3d8d2c2 | util-linux | no fix listed | 1 |
| ghcr.io/ | b175cc61959a | util-linux | no fix listed | 1 |
| ghcr.io/ | 67498ee2e639 | util-linux | no fix listed | 1 |
| ghcr.io/ | 71323a4f3fc5 | util-linux | no fix listed | 1 |
| ghcr.io/ | 76d4fbcc6ff0 | util-linux | no fix listed | 1 |
| ghcr.io/ | a5d7e3cf71d3 | util-linux | no fix listed | 1 |
| ghcr.io/ | a6d5abe94706 | util-linux | no fix listed | 1 |
| ghcr.io/ | 31966a825782 | util-linux | no fix listed | 1 |
| ghcr.io/ | ec9fc5864cd5 | util-linux | no fix listed | 1 |
| ghcr.io/ | 7a331eb83c6a | util-linux | no fix listed | 1 |
| ghcr.io/ | 470ff3529746 | util-linux | no fix listed | 1 |
| ghcr.io/ | 7fc7ec101f08 | util-linux | no fix listed | 1 |
| ghcr.io/ | 75537ea8c851 | util-linux | no fix listed | 1 |
| ghcr.io/ | 6e05055b701f | util-linux | no fix listed | 1 |
| ghcr.io/ | 4cb88b603cdc | util-linux | no fix listed | 1 |
| ghcr.io/ | bd7fbf4505b5 | util-linux | no fix listed | 1 |
| ghcr.io/ | 3f257a843222 | util-linux | 2.41.6-r1 | 1 |
| ghcr.io/ | 46d1a7e95109 | util-linux | 2.41.6-r1 | 1 |
| ghcr.io/ | 4e322858fe56 | util-linux | no fix listed | 1 |
| ghcr.io/ | 604b1f493c92 | util-linux | no fix listed | 1 |
| ghcr.io/ | 6d051840bb29 | util-linux | no fix listed | 1 |
| ghcr.io/ | 81db69cdd0b6 | util-linux | no fix listed | 1 |
| ghcr.io/ | 85c9935ff31b | util-linux | no fix listed | 1 |
| ghcr.io/ | 87eb325d306f | util-linux | no fix listed | 1 |
| ghcr.io/ | 97a3d37e709f | util-linux | no fix listed | 1 |
| ghcr.io/ | 9dd7d7c320d2 | util-linux | 2.42.3-r1 | 1 |
| ghcr.io/ | 9fdec1be03e4 | util-linux | no fix listed | 1 |
| ghcr.io/ | a07ee694304b | util-linux | no fix listed | 1 |
| ghcr.io/ | a1f5cebb5240 | util-linux | no fix listed | 1 |
| ghcr.io/ | a3ca4c02a5df | util-linux | no fix listed | 1 |
| ghcr.io/ | a59e5eead495 | util-linux | no fix listed | 1 |
| ghcr.io/ | b130d6cee6cb | util-linux | no fix listed | 1 |
| ghcr.io/ | b294a4278407 | util-linux | no fix listed | 1 |
| ghcr.io/ | bfd9d13ac58a | util-linux | no fix listed | 1 |
| ghcr.io/ | d0f4ae0b32a8 | util-linux | no fix listed | 1 |
| ghcr.io/ | dfd7a4697116 | util-linux | no fix listed | 1 |
| ghcr.io/ | fd4da88bfeaa | util-linux | no fix listed | 1 |
| ghcr.io/ | 128081dae281 | util-linux | no fix listed | 1 |
| ghcr.io/ | afb3e9282952 | util-linux | no fix listed | 1 |
| ghcr.io/ | f06525afac6b | util-linux | no fix listed | 1 |
| ghcr.io/ | dec44673c865 | util-linux | no fix listed | 1 |
| ghcr.io/ | 5d2fd44366a4 | util-linux | no fix listed | 1 |
| ghcr.io/ | 6287ce8be502 | util-linux | no fix listed | 1 |
| ghcr.io/ | ff2af53897e7 | util-linux | no fix listed | 1 |
| ghcr.io/ | 0fe80de2d22c | util-linux | no fix listed | 1 |
| ghcr.io/ | 0642357c5dbd | util-linux | no fix listed | 1 |
| ghcr.io/ | 4b05bcd28e69 | util-linux | no fix listed | 1 |