StackRadar

CVE-2026-86409

Low

Advisory

Published 14 Oct 2026In the index since 15 Oct 2026
Severity
Low
worst across findings
CVSS
2.0
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
835
of 18,137 indexed, latest versions
Container images
688
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 835 of 18,137 indexed charts deploy, on 688 images.

Affected packageAffected versionsFixed inImages
curldeb1:8.14.1-2+deb13u3+e1, 1:8.22.0-1+e1, 7.88.1-10, 7.88.1-10+deb12u1+23 moreno fix listed688
OSV records
DEBIAN-CVE-2026-86409ECHO-b6fb-b123-10db
Trending
Rank 49 in indexed charts, since 15 Oct 2026. See the ranking →

Charts affected

835 by stars
ChartLatestAffected imagesRadar Score
u-storeunifieVerified publisher1.2.01 of 1See more

u-store unifie 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
public.ecr.aws/g4a0y2u8/unifie-store:staging-19925a2057fabc948
curl@7.88.1-10+deb12u5
no fix listed

Open the chart page →

17,411
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
curl@7.88.1-10+deb12u8
no fix listed

Open the chart page →

14,332
varnish-ingress-controllervarnish-ingress-controllerVerified publisher0.5.01 of 1See more

varnish-ingress-controller varnish-ingress-controller 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
mariusm/vingress:0.5.0b3db186c3d72
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

2,745
devportal-admin-uiveecode-platformVerified publisher0.5.41 of 1See more

devportal-admin-ui veecode-platform 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
veecode/devportal-admin-ui:0.4.30c69fd286b489
curl@7.88.1-10+deb12u12
no fix listed

Open the chart page →

6,275
waldurwaldur-chartsVerified publisher8.1.31 of 3See more

waldur waldur-charts 8.1.3

1 of the 3 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
opennode/waldur-mastermind:8.1.382e8f276c5ed
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

4,171
wordpress-e2e-setupwoocommerce-e2e-setup0.1.11 of 2See more

wordpress-e2e-setup woocommerce-e2e-setup 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
library/wordpress:6.8-apache30bff39330d1
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

9,749
wordpress-helmwordpress-helm0.2.91 of 4See more

wordpress-helm wordpress-helm 0.2.9

1 of the 4 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
curl@8.14.1-2+deb13u3
no fix listed

Open the chart page →

10,533
abstract-nodeabstract-nodeVerified publisher0.1.491 of 2See more

abstract-node abstract-node 0.1.49

1 of the 2 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
matterlabs/external-node:9734bf2-17870579939295dadc06bdf3b
curl@7.88.1-10+deb12u7
no fix listed

Open the chart page →

5,724
jenkinsaditisingh-jenkins1.0.01 of 1See more

jenkins aditisingh-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,194
gotenbergadnoctemVerified publisher0.5.01 of 1See more

gotenberg adnoctem 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.37.0f29984bd1e22
curl@8.21.0-2~bpo13+1
no fix listed

Open the chart page →

11,268
linkwardenadnoctemVerified publisher0.5.11 of 2See more

linkwarden adnoctem 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
curl@7.88.1-10+deb12u15
no fix listed

Open the chart page →

5,168
uptime-kumaadnoctemVerified publisher0.4.31 of 1See more

uptime-kuma adnoctem 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.69912da7d7d9b
curl@7.88.1-10+deb12u14
no fix listed

Open the chart page →

36,817
ahnlich-dbahnlich-dbVerified publisher0.1.11 of 1See more

ahnlich-db ahnlich-db 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
ghcr.io/deven96/ahnlich-db:latest075301b4cfe1
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,275
pod-sweeperairbyteVerified publisher1.5.11 of 1See more

pod-sweeper airbyte 1.5.1

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
airbyte/pod-sweeper:1.5.198d2c39d512e
curl@7.88.1-10+deb12u8
no fix listed

Open the chart page →

5,840
airbyteairbyte-v2Verified publisher2.4.01 of 10See more

airbyte airbyte-v2 2.4.0

1 of the 10 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
airbyte/manifest-server:7.28.2deec511b51c3
curl@7.88.1-10+deb12u15
no fix listed

Open the chart page →

15,618
akto-mini-testingakto1.46.11 of 5See more

akto-mini-testing akto 1.46.1

1 of the 5 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-ai-automated-testing:latest573542399fe4
curl@7.88.1-10+deb12u15
no fix listed

Open the chart page →

6,196
esphomealekcVerified publisher2.9.11 of 1See more

esphome alekc 2.9.1

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
esphome/esphome:2026.9.14ad55931c018
curl@8.14.1-2+deb13u3
no fix listed

Open the chart page →

3,747
komodoalekcVerified publisher3.1.01 of 1See more

komodo alekc 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
ghcr.io/moghtech/komodo-core:2.3.3bca73d0eee14
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

2,410
alertigatealertigate0.6.01 of 1See more

alertigate alertigate 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
ghcr.io/feresberbeche/alertigate:2.0.07b9bba80f207
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,712
esphomealexmorbo-esphomeVerified publisher1.0.01 of 1See more

esphome alexmorbo-esphome 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
esphome/esphome:2024.12.2b2c6322700ac
curl@7.88.1-10+deb12u8
no fix listed

Open the chart page →

6,942
flaresolverralexmorbo-flaresolverrVerified publisher0.2.01 of 1See more

flaresolverr alexmorbo-flaresolverr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
curl@7.88.1-10+deb12u14
no fix listed

Open the chart page →

32,841
tubearchivistalexmorbo-tubearchivistVerified publisher0.1.01 of 2See more

tubearchivist alexmorbo-tubearchivist 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
bbilly1/tubearchivist:v0.5.9b827a713f55b
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

6,067
nginx-sni-proxyalexpressoVerified publisher1.0.41 of 1See more

nginx-sni-proxy alexpresso 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
anchore-admission-controlleranchore-charts0.9.21See more

anchore-admission-controller anchore-charts 0.9.2

1 container image this version deploys carries CVE-2026-86409.

Container imageDigestPackageFixed in
cfssl/cfssl:v1.6.5c9018c2ddf0b
curl@7.88.1-10+deb12u5
no fix listed

Open the chart page →

—
music-assistant-serverandibraeuVerified publisher2.1.51See more

music-assistant-server andibraeu 2.1.5

1 container image this version deploys carries CVE-2026-86409.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.10.645fdb050e069
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

—
stalwartandibraeuVerified publisher1.0.51See more

stalwart andibraeu 1.0.5

1 container image this version deploys carries CVE-2026-86409.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.16.26254ce5d7f3db
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

—
mathesarandrenarchyVerified publisher1.8.01 of 1See more

mathesar andrenarchy 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
mathesar/mathesar:0.12.0091757cb01fe
curl@7.88.1-10+deb12u14
no fix listed

Open the chart page →

8,796
speech-to-phraseandrenarchyVerified publisher1.3.01 of 1See more

speech-to-phrase andrenarchy 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
rhasspy/wyoming-speech-to-phrase:1.4.3e532f0dbc6b2
curl@7.88.1-10+deb12u14
no fix listed

Open the chart page →

4,491
ansible-inspecansible-inspec0.2.171 of 2See more

ansible-inspec ansible-inspec 0.2.17

1 of the 2 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

6,207
antrea-uiantreaVerified publisher0.8.01 of 2See more

antrea-ui antrea 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
antrea/antrea-ui-frontend:v0.8.0ee9686bcefb8
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

4,095
kesque-dashboardapache-pulsar-helm-chart-repo0.0.51 of 5See more

kesque-dashboard apache-pulsar-helm-chart-repo 0.0.5

1 of the 5 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

4,534
appriseapprise0.2.11 of 1See more

apprise apprise 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
caronc/apprise:latest0b2913b15c8e
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,973
accounts-uiappscodeVerified publisher2026.10.121 of 1See more

accounts-ui appscode 2026.10.12

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.10.1265bce2a5ff54
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,730
ace-installer-certifiedappscodeVerified publisher2026.10.121 of 2See more

ace-installer-certified appscode 2026.10.12

1 of the 2 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.10.1265bce2a5ff54
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

3,797
billingappscodeVerified publisher2026.10.121 of 1See more

billing appscode 2026.10.12

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.10.1265bce2a5ff54
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,730
marketplace-apiappscodeVerified publisher2026.10.121 of 1See more

marketplace-api appscode 2026.10.12

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.10.1265bce2a5ff54
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,730
platform-apiappscodeVerified publisher2026.10.151See more

platform-api appscode 2026.10.15

1 container image this version deploys carries CVE-2026-86409.

Container imageDigestPackageFixed in
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
curl@8.16.0-4~bpo13+1
no fix listed

Open the chart page →

—
haproxyappuio2.7.21 of 1See more

haproxy appuio 2.7.2

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
ghcr.io/vshn/haproxy-with-mysql:1.0.0a3c27ee3fb2f
curl@7.88.1-10+deb12u1
no fix listed

Open the chart page →

6,803
dokuwikiarea-42Verified publisher0.1.81 of 1See more

dokuwiki area-42 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
curl@8.14.1-2
no fix listed

Open the chart page →

9,073
argonix-apiargonix0.6.51 of 4See more

argonix-api argonix 0.6.5

1 of the 4 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
ghcr.io/argonix-io/argonix-api:0.6.5431abcce7c1e
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

6,144
arlas-aiasarlas-stackVerified publisher28.9.07 of 22See more

arlas-aias arlas-stack 28.9.0

7 of the 22 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.0.1-debian-12-r0e6f6ddcce2f1
curl@7.88.1-10+deb12u12
no fix listed
bitnamilegacy/keycloak:26.3.3-debian-12-r0da3df0976a9f
curl@7.88.1-10+deb12u12
no fix listed
bitnamilegacy/minio:2024.12.18-debian-12-r1c0ede65eb88e
curl@7.88.1-10+deb12u8
no fix listed
bitnamilegacy/minio:2025.4.22-debian-12-r1d7cd0e172c4c
curl@7.88.1-10+deb12u12
no fix listed
bitnamilegacy/os-shell:12-debian-12-r439ba5d16f9c64
curl@7.88.1-10+deb12u12
no fix listed
bitnamilegacy/rabbitmq:4.1.2-debian-12-r074a3d7c747eb
curl@7.88.1-10+deb12u12
no fix listed
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
curl@7.88.1-10+deb12u12
no fix listed

Open the chart page →

47,728
resource-provisioningassist-iot-resource-provisioning1.0.01 of 7See more

resource-provisioning assist-iot-resource-provisioning 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
library/buildpack-deps:curl3dd78c060b4d
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

9,643
smartorchestratorassist-iot-smart-orchestrator4.0.01 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

1 of the 14 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
curl@7.88.1-10+deb12u1
no fix listed

Open the chart page →

52,640
videoaugmentationassist-iot-video-augmentation0.1.01 of 3See more

videoaugmentation assist-iot-video-augmentation 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

77,755
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
curl@7.88.1-10+deb12u7
no fix listed

Open the chart page →

37,669
asya-playgroundasya1.1.31 of 1See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
localstack/localstack:3.19d278167f2b7
curl@7.88.1-10+deb12u5
no fix listed

Open the chart page →

10,943
webappavzi-webapp0.1.01 of 1See more

webapp avzi-webapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
avzini/web-app:latestf40b30210ed0
curl@7.88.1-10+deb12u4
no fix listed

Open the chart page →

6,799
nas-appsawesomeVerified publisher2.0.01 of 8See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

7,729
aws-web-service-proxifiedaws-web-service-proxified1.8.01 of 2See more

aws-web-service-proxified aws-web-service-proxified 1.8.0

1 of the 2 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
library/httpd:latestc842ac797bd1
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,804
backstage-pyactionsbackstage-pyactionsVerified publisher0.1.01 of 1See more

backstage-pyactions backstage-pyactions 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-86409.

Container imageDigestPackageFixed in
mawad98/backstage-pyactions:demo99422c56a274
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

3,285

Container images carrying it

688 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

No deployed image carries CVE-2026-86409.

syft 1.42.1 · advisories as of 15 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.