StackRadar

CVE-2026-86412

Low

Advisory

Published 14 Oct 2026In the index since 18 Oct 2026
Severity
Low
worst across findings
CVSS
2.0
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
51
of 18,176 indexed, latest versions
Container images
55
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 51 of 18,176 indexed charts deploy, on 55 images.

Affected packageAffected versionsFixed inImages
curldeb8.18.0-1ubuntu2.1, 8.18.0-1ubuntu2.2, 8.18.0-1ubuntu2.3, 8.18.0-1ubuntu2.4+2 more8.18.0-1ubuntu2.855
OSV records
UBUNTU-CVE-2026-86412
Also known as
USN-8927-1

Charts affected

51 by stars
ChartLatestAffected imagesRadar Score
argo-cdargoOfficialVerified publisher10.10.51 of 3See more

argo-cd argo 10.10.5

1 of the 3 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.5.513db7b10db23
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8

Open the chart page →

2,816
argo-cdargo-cd-oci10.10.51 of 3See more

argo-cd argo-cd-oci 10.10.5

1 of the 3 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.5.513db7b10db23
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8

Open the chart page →

2,816
netboxnetboxOfficialVerified publisher8.3.921 of 5See more

netbox netbox 8.3.92

1 of the 5 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
ghcr.io/netbox-community/netbox:v4.7.33a1e8d317c63
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8

Open the chart page →

1,802
weblateweblateOfficialVerified publisher0.5.431 of 3See more

weblate weblate 0.5.43

1 of the 3 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
weblate/weblate:2026.10.1.1b0f200f38d70
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8

Open the chart page →

7,752
akhqakhq0.28.01 of 1See more

akhq akhq 0.28.0

1 of the 1 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
tchiotludo/akhq:0.28.0c2824dc2ae44
curl@8.18.0-1ubuntu2.3
8.18.0-1ubuntu2.8

Open the chart page →

2,387
camel-kcamel-kVerified publisher2.11.01 of 1See more

camel-k camel-k 2.11.0

1 of the 1 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
apache/camel-k:2.11.0d173e7efe258
curl@8.18.0-1ubuntu2.4
8.18.0-1ubuntu2.8

Open the chart page →

2,016
openclawopenclawVerified publisher1.111.01 of 2See more

openclaw openclaw 1.111.0

1 of the 2 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.57.06bac628b3d82
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8

Open the chart page →

3,375
kubectlkubelauncherVerified publisher0.3.21 of 1See more

kubectl kubelauncher 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/kubectldigest-pinned2a5b40c827ab
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8

Open the chart page →

928
mongodbkubelauncherVerified publisher0.4.91 of 1See more

mongodb kubelauncher 0.4.9

1 of the 1 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/mongodbdigest-pinneda08462d8670e
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8

Open the chart page →

791
minecraft-proxyminecraft-server-chartsVerified publisher3.10.01 of 1See more

minecraft-proxy minecraft-server-charts 3.10.0

1 of the 1 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
itzg/bungeecord:latest7b7ff61d2a60
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8

Open the chart page →

3,666
photoprismandrenarchyVerified publisher8.15.01 of 1See more

photoprism andrenarchy 8.15.0

1 of the 1 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
photoprism/photoprism:260728958642220223
curl@8.18.0-1ubuntu2.3
8.18.0-1ubuntu2.8

Open the chart page →

50,535
tt-rssangelnu7.0.01 of 2See more

tt-rss angelnu 7.0.0

1 of the 2 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
ghcr.io/angelnu/tt-rss:2.0.100809fb02162f151
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8

Open the chart page →

1,174
geoservercloudcamptocamp23.0.17 of 7See more

geoservercloud camptocamp2 3.0.1

7 of the 7 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:3.0.1.1de0b20bd2a43
curl@8.18.0-1ubuntu2.3
8.18.0-1ubuntu2.8
geoservercloud/geoserver-cloud-gwc:3.0.1.1b04ed89b5d2b
curl@8.18.0-1ubuntu2.3
8.18.0-1ubuntu2.8
geoservercloud/geoserver-cloud-rest:3.0.1.1318254b52f96
curl@8.18.0-1ubuntu2.3
8.18.0-1ubuntu2.8
geoservercloud/geoserver-cloud-wcs:3.0.1.14f077124f591
curl@8.18.0-1ubuntu2.3
8.18.0-1ubuntu2.8
geoservercloud/geoserver-cloud-webui:3.0.1.14f91e3048ac8
curl@8.18.0-1ubuntu2.3
8.18.0-1ubuntu2.8
geoservercloud/geoserver-cloud-wfs:3.0.1.1299f0d6232d1
curl@8.18.0-1ubuntu2.3
8.18.0-1ubuntu2.8
geoservercloud/geoserver-cloud-wms:3.0.1.15164f687ce4d
curl@8.18.0-1ubuntu2.3
8.18.0-1ubuntu2.8

Open the chart page →

16,929
nacosgujunxiang0.1.51 of 1See more

nacos gujunxiang 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
curl@8.18.0-1ubuntu2.4
8.18.0-1ubuntu2.8

Open the chart page →

2,818
feedbacksystemthm-mni-iiVerified publisher0.48.32 of 14See more

feedbacksystem thm-mni-ii 0.48.3

2 of the 14 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
ghcr.io/thm-mni-ii/fbs-core:v2.0.918e54463756e
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8
ghcr.io/thm-mni-ii/fbs-identity-service:v2.0.945929f5c1a12
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8

Open the chart page →

30,223
argo-cdwenerme10.10.51 of 3See more

argo-cd wenerme 10.10.5

1 of the 3 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.5.513db7b10db23
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8

Open the chart page →

2,816
aramid-indexerbiatec-repoVerified publisher3.9.02 of 5See more

aramid-indexer biatec-repo 3.9.0

2 of the 5 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
scholtz2/aramid-conduit:v1.9.0-stable3a3b3d3277d2
curl@8.18.0-1ubuntu2.1
8.18.0-1ubuntu2.8
scholtz2/aramid-indexer:v3.9.0-stable6770214bc881
curl@8.18.0-1ubuntu2.1
8.18.0-1ubuntu2.8

Open the chart page →

17,829
nacosbytectl0.1.61 of 1See more

nacos bytectl 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
curl@8.18.0-1ubuntu2.4
8.18.0-1ubuntu2.8

Open the chart page →

2,818
datacube-explorerdatacube-charts0.7.01 of 1See more

datacube-explorer datacube-charts 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
ghcr.io/opendatacube/explorer:3.2.17c25578068cd
curl@8.18.0-1ubuntu2.4
8.18.0-1ubuntu2.8

Open the chart page →

2,342
plexluiscajl1.0.11 of 2See more

plex luiscajl 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/plex:latest3f71bd6eb6a4
curl@8.18.0-1ubuntu2.5
8.18.0-1ubuntu2.8

Open the chart page →

977
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
treskon/portrait:DEV-latest88e813f22347
curl@8.18.0-1ubuntu2.3
8.18.0-1ubuntu2.8

Open the chart page →

37,764
workflows-aggregatorworkflows-aggregatorVerified publisher0.16.121 of 1See more

workflows-aggregator workflows-aggregator 0.16.12

1 of the 1 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/workflows-aggregator:0.16.12ce790a4023b6
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8

Open the chart page →

1,185
akto-ai-guardrails-v2akto0.3.01 of 6See more

akto-ai-guardrails-v2 akto 0.3.0

1 of the 6 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
aktosecurity/data-ingestion-service:1.4.946ed5bcb04b2
curl@8.18.0-1ubuntu2.2
8.18.0-1ubuntu2.8

Open the chart page →

51,557
akto-central-setupakto1.2.42 of 5See more

akto-central-setup akto 1.2.4

2 of the 5 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
aktosecurity/akto-threat-detection-backend:1.18.75a0c66e59678
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8
library/eclipse-temurin:213e3c176ffed1
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8

Open the chart page →

5,057
akto-hybrid-redactakto1.44.92 of 5See more

akto-hybrid-redact akto 1.44.9

2 of the 5 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:1.75.1_local49c88519dc19
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:1.74.7_local500745200425
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8

Open the chart page →

5,958
akto-mini-runtimeakto0.7.232 of 5See more

akto-mini-runtime akto 0.7.23

2 of the 5 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:latesteeff3738d708
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8
public.ecr.aws/aktosecurity/akto-threat-detection:latesta1fe1ef75a55
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8

Open the chart page →

6,676
akto-mini-testingakto1.46.11 of 5See more

akto-mini-testing akto 1.46.1

1 of the 5 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:1.75.1_local8eff42336169
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8

Open the chart page →

6,381
akto-regional-setupakto1.4.113 of 9See more

akto-regional-setup akto 1.4.11

3 of the 9 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
aktosecurity/data-ingestion-service:1.6.6dc4b05df83f7
curl@8.18.0-1ubuntu2.2
8.18.0-1ubuntu2.8
aktosecurity/mini-runtime:1.72.15498e3e35ecc2
curl@8.18.0-1ubuntu2.4
8.18.0-1ubuntu2.8
public.ecr.aws/aktosecurity/akto-threat-detection:1.18.755b1bd20ef02
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8

Open the chart page →

33,469
akto-runtimeakto0.1.81 of 2See more

akto-runtime akto 0.1.8

1 of the 2 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:latest6b75164ae737
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8

Open the chart page →

2,049
akto-threat-backendakto0.1.51 of 2See more

akto-threat-backend akto 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
aktosecurity/akto-threat-detection-backend:latestd9d0e7c78578
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8

Open the chart page →

2,124
akto-threat-clientakto0.2.01 of 2See more

akto-threat-client akto 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-threat-detection:latestf14d68a2b1cf
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8

Open the chart page →

2,155
plexalekcVerified publisher2.10.11 of 1See more

plex alekc 2.10.1

1 of the 1 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
linuxserver/plex:1.43.406e07af2851e
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8

Open the chart page →

811
plexbryopsida0.2.01 of 1See more

plex bryopsida 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
linuxserver/plex:latest06e07af2851e
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8

Open the chart page →

811
mapservercamptocamp-apache0.1.101 of 2See more

mapserver camptocamp-apache 0.1.10

1 of the 2 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
camptocamp/mapserver:master18959d939a66
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8

Open the chart page →

1,670
argo-cdcluster-deploy0.3.31 of 3See more

argo-cd cluster-deploy 0.3.3

1 of the 3 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.5.3dd3f47d5a5e4
curl@8.18.0-1ubuntu2.5
8.18.0-1ubuntu2.8

Open the chart page →

4,039
clusterplexclusterplexVerified publisher1.1.101 of 3See more

clusterplex clusterplex 1.1.10

1 of the 3 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
linuxserver/plex:latest06e07af2851e
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8

Open the chart page →

4,320
opencloudcommunity-opencloud3.2.01 of 13See more

opencloud community-opencloud 3.2.0

1 of the 13 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
apache/tika:latest-fullab9cc988828c
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8

Open the chart page →

11,024
datacube-owsdatacube-charts0.22.01 of 1See more

datacube-ows datacube-charts 0.22.0

1 of the 1 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
ghcr.io/opendatacube/ows:1.9.17de29324e9801
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8

Open the chart page →

1,663
web3signerethereum-helm-chartsVerified publisher1.0.61 of 4See more

web3signer ethereum-helm-charts 1.0.6

1 of the 4 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
consensys/web3signer:latest0a64d3b00613
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8

Open the chart page →

838
komgahelmforgeVerified publisher1.4.171 of 1See more

komga helmforge 1.4.17

1 of the 1 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
gotson/komga:1.29.19fa656e8259b
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8

Open the chart page →

26,396
netboxhelmforgeVerified publisher2.0.41 of 4See more

netbox helmforge 2.0.4

1 of the 4 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v4.6.10-5.0.291b823a05cb5
curl@8.18.0-1ubuntu2.3
8.18.0-1ubuntu2.8

Open the chart page →

5,166
browserlessicoretechVerified publisher0.18.11 of 1See more

browserless icoretech 0.18.1

1 of the 1 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.57.06bac628b3d82
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8

Open the chart page →

1,490
kube-bootkube-bootVerified publisher1.2.21 of 1See more

kube-boot kube-boot 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
library/eclipse-temurin:213e3c176ffed1
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8

Open the chart page →

995
plex-rclone-wireguardluiscajl1.0.191 of 2See more

plex-rclone-wireguard luiscajl 1.0.19

1 of the 2 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
linuxserver/plex:latest06e07af2851e
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8

Open the chart page →

811
pgdogpgdog0.92.01 of 1See more

pgdog pgdog 0.92.0

1 of the 1 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
ghcr.io/pgdogdev/pgdog:v0.1.61611f2874dcf0
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8

Open the chart page →

720
unifiqaoruVerified publisher1.1.71 of 2See more

unifi qaoru 1.1.7

1 of the 2 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
linuxserver/unifi-network-application:10.6.106-ls149bb0510fedc3b
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8

Open the chart page →

4,265
management-portalradar-baseVerified publisher1.7.01 of 1See more

management-portal radar-base 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
ghcr.io/radar-base/managementportal/management-portal:3.0.0c1b37e821f72
curl@8.18.0-1ubuntu2.1
8.18.0-1ubuntu2.8

Open the chart page →

4,168
komgarubxkubeVerified publisher0.1.51 of 1See more

komga rubxkube 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
gotson/komga:1.28.1d8f772dce7b3
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8

Open the chart page →

26,409
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
curl@8.18.0-1ubuntu2.1
8.18.0-1ubuntu2.8

Open the chart page →

61,793
bootzookasoftwaremillVerified publisher0.2.11 of 2See more

bootzooka softwaremill 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
softwaremill/bootzooka:latestdfd0d3a7246a
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8

Open the chart page →

1,022

Container images carrying it

55 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
public.ecr.aws/aktosecurity/akto-threat-detection:1.18.755b1bd20ef02
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8
1
public.ecr.aws/aktosecurity/akto-threat-detection:latesta1fe1ef75a55
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8
1
public.ecr.aws/aktosecurity/akto-threat-detection:latestf14d68a2b1cf
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8
1
quay.io/argoproj/argocd:v3.5.3dd3f47d5a5e4
curl@8.18.0-1ubuntu2.5
8.18.0-1ubuntu2.8
1
registry.gitlab.com/dyff/workflows-aggregator:0.16.12ce790a4023b6
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8
1

syft 1.42.1 · advisories as of 18 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.