StackRadar

CVE-2026-82209

High

Advisory

Published 2 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
0.005
44th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,931
of 17,797 indexed, latest versions
Container images
1,737
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,931 of 17,797 indexed charts deploy, on 1,737 images.

Affected packageAffected versionsFixed inImages
curldeb1:8.14.1-2+deb13u3+e1, 7.47.0-1ubuntu2.2, 7.47.0-1ubuntu2.5, 7.47.0-1ubuntu2.6+107 more1:8.14.1-2+deb13u3+e31,380
curlapk8.10.1-r0, 8.10.1-r1, 8.12.0-r1, 8.12.1-r0+11 more8.22.0-r0, 8.22.0-r2357
OSV records
ALPINE-CVE-2026-82209DEBIAN-CVE-2026-82209UBUNTU-CVE-2026-82209CGA-9f3f-x983-mfhpCGA-j94g-crm5-pmj7ECHO-7268-3d2f-bfcf
Also known as
CGA-ccc6-3x2j-267v, CGA-j4hv-w3rj-j5r2, CGA-rmc2-h5mg-6v9h, CGA-vp94-fhjh-v5w8

Charts affected

1,931 by stars
ChartLatestAffected imagesRadar Score
esphomeegebackVerified publisher2.0.251 of 1See more

esphome egeback 2.0.25

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
esphome/esphome:2026.7.44866347cb5b4
curl@8.14.1-2+deb13u3
no fix listed

Open the chart page →

3,206
home-assistantegebackVerified publisher2.0.351 of 1See more

home-assistant egeback 2.0.35

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.8.256690a89c79a
curl@8.20.0-r1
8.22.0-r0

Open the chart page →

2,160
node-redegebackVerified publisher2.0.131 of 1See more

node-red egeback 2.0.13

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
nodered/node-red:5.0.410f40d0a83e7
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

977
unifiegebackVerified publisher2.1.61 of 1See more

unifi egeback 2.1.6

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
curl@7.68.0-1ubuntu2.25
no fix listed

Open the chart page →

7,407
uptime-kumaegebackVerified publisher2.0.121 of 1See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
curl@7.88.1-10+deb12u14
no fix listed

Open the chart page →

30,529
mongodb-charteks-3-tier-app-chart0.1.01 of 1See more

mongodb-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
library/mongo:4.4.66efa05203990
curl@7.58.0-2ubuntu3.13
no fix listed

Open the chart page →

8,057
eks-auto-pod-id-assoceks-auto-pod-id-assoc0.6.01 of 1See more

eks-auto-pod-id-assoc eks-auto-pod-id-assoc 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
udhos/eks-auto-pod-id-assoc:0.6.0196ef68af380
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

950
pgadmin4eks-storageclass0.1.01 of 2See more

pgadmin4 eks-storageclass 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
dpage/pgadmin4:latest2f4ce946ddf8
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

398
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
curl@7.68.0-1ubuntu2.14
no fix listed

Open the chart page →

25,285
elasticsearch-umbrellaempathyco0.8.121 of 3See more

elasticsearch-umbrella empathyco 0.8.12

1 of the 3 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
empathyco/elasticsearch:7.17.2-memlock03e724e41eeb
curl@7.68.0-1ubuntu2.7
no fix listed

Open the chart page →

10,618
kube-ecp-stackemqx-operator2.5.12 of 16See more

kube-ecp-stack emqx-operator 2.5.1

2 of the 16 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
emqx/ecp-ui:2.5.1e33e9816f147
curl@7.88.1-10+deb12u8
no fix listed
library/telegraf:1.27507a3eecf809
curl@7.88.1-10+deb12u5
no fix listed

Open the chart page →

23,844
enderdash-agentenderdashVerified publisher0.1.61 of 1See more

enderdash-agent enderdash 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
ghcr.io/enderdash-com/enderdash-agent:latest8525a1a67958
curl@8.5.0-2ubuntu10.13
no fix listed

Open the chart page →

705
kube-packetloss-exporterenixVerified publisher0.2.11 of 2See more

kube-packetloss-exporter enix 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.3164614ef8290f
curl@7.88.1-10+deb12u8
no fix listed

Open the chart page →

6,183
nginx-charteoc-chartsVerified publisher2.0.01 of 1See more

nginx-chart eoc-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,861
wordpresseoc-chartsVerified publisher0.14.41 of 1See more

wordpress eoc-charts 0.14.4

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
library/wordpress:6.8.3-apache30bff39330d1
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

7,330
eolicplantseolicplantsVerified publisher0.1.02 of 7See more

eolicplants eolicplants 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
curl@7.58.0-2ubuntu3.12
no fix listed
oscarsotosanchez/weatherservice:v1.0911ec961d10b
curl@7.58.0-2ubuntu3.12
no fix listed

Open the chart page →

27,416
eoloPlanteolo-plannerVerified publisher0.1.02 of 7See more

eoloPlant eolo-planner 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
library/mongo:5.0-focal5e15a3f014ed
curl@7.68.0-1ubuntu2.25
no fix listed
mastercloudapps/planner:v1.2340a950b311b2
curl@7.81.0-1ubuntu1.8
no fix listed

Open the chart page →

27,784
eoloplannereoloplannerVerified publisher0.1.02 of 7See more

eoloplanner eoloplanner 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
curl@7.81.0-1ubuntu1.8
no fix listed
library/mongo:5.0.6-focal8e70544b6c76
curl@7.68.0-1ubuntu2.7
no fix listed

Open the chart page →

32,456
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.02 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
library/mongo:5.0-focal5e15a3f014ed
curl@7.68.0-1ubuntu2.25
no fix listed
mastercloudapps/planner:v1.2340a950b311b2
curl@7.81.0-1ubuntu1.8
no fix listed

Open the chart page →

27,784
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.02 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
curl@7.58.0-2ubuntu3.12
no fix listed
oscarsotosanchez/weatherservice:v1.0911ec961d10b
curl@7.58.0-2ubuntu3.12
no fix listed

Open the chart page →

27,382
eoloplannereoloplanner-molynx-gat0.1.01 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
library/mongo:4.4.66efa05203990
curl@7.58.0-2ubuntu3.13
no fix listed

Open the chart page →

28,588
eolo-plannereolo-planner-repo0.1.01 of 7See more

eolo-planner eolo-planner-repo 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
library/mongo:5.0.6-focal8e70544b6c76
curl@7.68.0-1ubuntu2.7
no fix listed

Open the chart page →

27,237
eoloplanteoloplant1.0.02 of 7See more

eoloplant eoloplant 1.0.0

2 of the 7 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
library/mongo:5.0-focal5e15a3f014ed
curl@7.68.0-1ubuntu2.25
no fix listed
mastercloudapps/planner:v1.2340a950b311b2
curl@7.81.0-1ubuntu1.8
no fix listed

Open the chart page →

27,784
eoloplantseoloplants-urjcVerified publisher0.1.01 of 7See more

eoloplants eoloplants-urjc 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
library/mongo:5.0.6-focal8e70544b6c76
curl@7.68.0-1ubuntu2.7
no fix listed

Open the chart page →

27,861
servereoloserverVerified publisher0.1.02 of 7See more

server eoloserver 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
curl@7.81.0-1ubuntu1.8
no fix listed
library/mongo:5.0.6-focal8e70544b6c76
curl@7.68.0-1ubuntu2.7
no fix listed

Open the chart page →

32,456
flywayeosc-lot-1Verified publisher0.7.01 of 3See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
flyway/flyway:9.1545b5d7cdc75a
curl@7.68.0-1ubuntu2.16
no fix listed

Open the chart page →

9,460
matomoeosc-lot-1Verified publisher0.2.01 of 1See more

matomo eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
library/matomo:5.1.2-apache2415789e1602
curl@7.88.1-10+deb12u8
no fix listed

Open the chart page →

5,385
gerrit-operatorepmdedpVerified publisher2.25.01 of 2See more

gerrit-operator epmdedp 2.25.0

1 of the 2 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
epamedp/edp-gerrit:3.14.249e8fe9c4855
curl@8.20.0-r0
8.22.0-r0

Open the chart page →

1,156
espocrmespocrmVerified publisher1.0.11 of 2See more

espocrm espocrm 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
espocrm/espocrm:9.3.101b5a24504ed9
curl@8.14.1-2+deb13u3
no fix listed

Open the chart page →

6,587
assertoorethereum-helm-chartsVerified publisher1.2.01 of 1See more

assertoor ethereum-helm-charts 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
ethpandaops/assertoor:latest1efa2fba6711
curl@8.14.1-2+deb13u3
no fix listed

Open the chart page →

2,928
benchmarkoor-uiethereum-helm-chartsVerified publisher0.1.01 of 1See more

benchmarkoor-ui ethereum-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/benchmarkoor-ui:latestd090bb2060d9
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,334
powfaucetethereum-helm-chartsVerified publisher1.2.11 of 1See more

powfaucet ethereum-helm-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
pk910/powfaucet:v2-stable3dcae6a62896
curl@7.88.1-10+deb12u12
no fix listed

Open the chart page →

4,497
syncoor-serverethereum-helm-chartsVerified publisher0.0.11 of 1See more

syncoor-server ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/syncoor:master233aa9808fc7
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

961
syncoor-webethereum-helm-chartsVerified publisher0.0.11 of 1See more

syncoor-web ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/syncoor-web:master60d7c38d6062
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

371
tekuethereum-helm-chartsVerified publisher1.2.11 of 2See more

teku ethereum-helm-charts 1.2.1

1 of the 2 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
consensys/teku:latest3a4f5761ae1c
curl@8.5.0-2ubuntu10.11
no fix listed

Open the chart page →

1,028
web3signerethereum-helm-chartsVerified publisher1.0.61 of 4See more

web3signer ethereum-helm-charts 1.0.6

1 of the 4 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
consensys/web3signer:latestf146a51a1ba3
curl@8.18.0-1ubuntu2.3
no fix listed

Open the chart page →

2,052
beeport-uiethersphereVerified publisher0.76.22 of 3See more

beeport-ui ethersphere 0.76.2

2 of the 3 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed
library/node:ltsbe23f54a88d3
curl@7.88.1-10+deb12u15
no fix listed

Open the chart page →

7,479
multichain-uiethersphereVerified publisher0.73.12 of 3See more

multichain-ui ethersphere 0.73.1

2 of the 3 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed
library/node:ltsbe23f54a88d3
curl@7.88.1-10+deb12u15
no fix listed

Open the chart page →

7,479
static-siteethersphereVerified publisher0.73.12 of 2See more

static-site ethersphere 0.73.1

2 of the 2 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed
library/node:latestf5d1cc40abc1
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

7,077
supportpalevilgn0me0.1.61 of 1See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
curl@7.68.0-1ubuntu2.5
no fix listed

Open the chart page →

20,955
spring-boot-adminevryfs-ossVerified publisher0.1.101 of 1See more

spring-boot-admin evryfs-oss 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
quay.io/evryfs/spring-boot-admin:2.7.1060950ef63764
curl@7.81.0-1ubuntu1.6
no fix listed

Open the chart page →

6,049
faasnetfaasnet0.0.41 of 5See more

faasnet faasnet 0.0.4

1 of the 5 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
mcr.microsoft.com/mssql/server:latest4bab24f36c1e
curl@8.5.0-2ubuntu10.11
no fix listed

Open the chart page →

7,723
fairwinds-insightsfairwinds-stableVerified publisher10.1.103 of 13See more

fairwinds-insights fairwinds-stable 10.1.10

3 of the 13 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
alpine/kubectl:1.35.49ccd82364762
curl@8.17.0-r1
8.22.0-r0
rustfs/rustfs:1.0.0-beta.1241fe89380f41
curl@8.21.0-r0
8.22.0-r0
swaggerapi/swagger-ui:v5.32.143d9316996884
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

3,814
event-generatorfalcosecurity0.4.01 of 1See more

event-generator falcosecurity 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
falcosecurity/event-generator:latest932956d86c99
curl@7.88.1-10+deb12u14
no fix listed

Open the chart page →

3,813
farm-observabilityfarm-observabilityOfficialVerified publisher0.27.21 of 18See more

farm-observability farm-observability 0.27.2

1 of the 18 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
grafana/grafana:13.0.1-security-012d1f9ae67c17
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

13,428
jenkinsfatihtepe-jenkins1.0.01 of 1See more

jenkins fatihtepe-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

2,498
activityrelayfedihost0.1.41 of 2See more

activityrelay fedihost 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
curl@7.81.0-1ubuntu1.3
no fix listed

Open the chart page →

13,512
rospoferama0.4.31 of 1See more

rospo ferama 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
ghcr.io/ferama/rospo:v0.12.0ab40c1745534
curl@7.88.1-10+deb12u5
no fix listed

Open the chart page →

6,157
vipienferama0.2.81 of 1See more

vipien ferama 0.2.8

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
ghcr.io/ferama/vipien:v0.5.3923a3f704b21
curl@7.68.0-1ubuntu2.7
no fix listed

Open the chart page →

7,531
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-82209.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
curl@7.47.0-1ubuntu2.14
no fix listed

Open the chart page →

14,714

Container images carrying it

1,737 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

No deployed image carries CVE-2026-82209.

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.