StackRadar

CVE-2026-86412

Low

Advisory

Published 14 Oct 2026In the index since 18 Oct 2026
Severity
Low
worst across findings
CVSS
2.0
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
51
of 18,176 indexed, latest versions
Container images
55
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 51 of 18,176 indexed charts deploy, on 55 images.

Affected packageAffected versionsFixed inImages
curldeb8.18.0-1ubuntu2.1, 8.18.0-1ubuntu2.2, 8.18.0-1ubuntu2.3, 8.18.0-1ubuntu2.4+2 more8.18.0-1ubuntu2.855
OSV records
UBUNTU-CVE-2026-86412
Also known as
USN-8927-1

Charts affected

51 by stars
ChartLatestAffected imagesRadar Score
argo-cdwener10.10.51 of 3See more

argo-cd wener 10.10.5

1 of the 3 container images this version deploys carry CVE-2026-86412.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.5.513db7b10db23
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8

Open the chart page →

2,816

Container images carrying it

55 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
linuxserver/plex:1.43.4:latest06e07af2851e
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8
4
quay.io/argoproj/argocd:v3.5.513db7b10db23
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8
4
library/eclipse-temurin:213e3c176ffed1
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8
2
nacos/nacos-server:latest1c191c30c8cd
curl@8.18.0-1ubuntu2.4
8.18.0-1ubuntu2.8
2
ghcr.io/browserless/chromium:v2.57.06bac628b3d82
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8
2
aktosecurity/akto-threat-detection-backend:1.18.75a0c66e59678
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8
1
aktosecurity/akto-threat-detection-backend:latestd9d0e7c78578
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8
1
aktosecurity/data-ingestion-service:1.4.946ed5bcb04b2
curl@8.18.0-1ubuntu2.2
8.18.0-1ubuntu2.8
1
aktosecurity/data-ingestion-service:1.6.6dc4b05df83f7
curl@8.18.0-1ubuntu2.2
8.18.0-1ubuntu2.8
1
aktosecurity/mini-runtime:1.72.15498e3e35ecc2
curl@8.18.0-1ubuntu2.4
8.18.0-1ubuntu2.8
1
apache/camel-k:2.11.0d173e7efe258
curl@8.18.0-1ubuntu2.4
8.18.0-1ubuntu2.8
1
apache/tika:latest-fullab9cc988828c
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8
1
camptocamp/mapserver:master18959d939a66
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8
1
consensys/web3signer:latest0a64d3b00613
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8
1
geoservercloud/geoserver-cloud-gateway:3.0.1.1de0b20bd2a43
curl@8.18.0-1ubuntu2.3
8.18.0-1ubuntu2.8
1
geoservercloud/geoserver-cloud-gwc:3.0.1.1b04ed89b5d2b
curl@8.18.0-1ubuntu2.3
8.18.0-1ubuntu2.8
1
geoservercloud/geoserver-cloud-rest:3.0.1.1318254b52f96
curl@8.18.0-1ubuntu2.3
8.18.0-1ubuntu2.8
1
geoservercloud/geoserver-cloud-wcs:3.0.1.14f077124f591
curl@8.18.0-1ubuntu2.3
8.18.0-1ubuntu2.8
1
geoservercloud/geoserver-cloud-webui:3.0.1.14f91e3048ac8
curl@8.18.0-1ubuntu2.3
8.18.0-1ubuntu2.8
1
geoservercloud/geoserver-cloud-wfs:3.0.1.1299f0d6232d1
curl@8.18.0-1ubuntu2.3
8.18.0-1ubuntu2.8
1
geoservercloud/geoserver-cloud-wms:3.0.1.15164f687ce4d
curl@8.18.0-1ubuntu2.3
8.18.0-1ubuntu2.8
1
gotson/komga:1.29.19fa656e8259b
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8
1
gotson/komga:1.28.1d8f772dce7b3
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8
1
itzg/bungeecord:latest7b7ff61d2a60
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8
1
linuxserver/unifi-network-application:10.6.106-ls149bb0510fedc3b
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8
1
netboxcommunity/netbox:v4.6.10-5.0.291b823a05cb5
curl@8.18.0-1ubuntu2.3
8.18.0-1ubuntu2.8
1
photoprism/photoprism:260601650c6ad5a651
curl@8.18.0-1ubuntu2.1
8.18.0-1ubuntu2.8
1
photoprism/photoprism:260728958642220223
curl@8.18.0-1ubuntu2.3
8.18.0-1ubuntu2.8
1
scholtz2/aramid-conduit:v1.9.0-stable3a3b3d3277d2
curl@8.18.0-1ubuntu2.1
8.18.0-1ubuntu2.8
1
scholtz2/aramid-indexer:v3.9.0-stable6770214bc881
curl@8.18.0-1ubuntu2.1
8.18.0-1ubuntu2.8
1
softwaremill/bootzooka:latestdfd0d3a7246a
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8
1
tchiotludo/akhq:0.28.0c2824dc2ae44
curl@8.18.0-1ubuntu2.3
8.18.0-1ubuntu2.8
1
treskon/portrait:DEV-latest88e813f22347
curl@8.18.0-1ubuntu2.3
8.18.0-1ubuntu2.8
1
weblate/weblate:2026.10.1.1b0f200f38d70
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8
1
ghcr.io/angelnu/tt-rss:2.0.100809fb02162f151
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8
1
ghcr.io/kubelauncher/kubectl2a5b40c827ab
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8
1
ghcr.io/kubelauncher/mongodba08462d8670e
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8
1
ghcr.io/linuxserver/plex:latest3f71bd6eb6a4
curl@8.18.0-1ubuntu2.5
8.18.0-1ubuntu2.8
1
ghcr.io/netbox-community/netbox:v4.7.33a1e8d317c63
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8
1
ghcr.io/opendatacube/explorer:3.2.1:latest7c25578068cd
curl@8.18.0-1ubuntu2.4
8.18.0-1ubuntu2.8
1
ghcr.io/opendatacube/ows:1.9.17de29324e9801
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8
1
ghcr.io/pgdogdev/pgdog:v0.1.61611f2874dcf0
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8
1
ghcr.io/radar-base/managementportal/management-portal:3.0.0c1b37e821f72
curl@8.18.0-1ubuntu2.1
8.18.0-1ubuntu2.8
1
ghcr.io/thm-mni-ii/fbs-core:v2.0.918e54463756e
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8
1
ghcr.io/thm-mni-ii/fbs-identity-service:v2.0.945929f5c1a12
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8
1
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:1.75.1_local49c88519dc19
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8
1
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:1.74.7_local:latest6b75164ae737
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8
1
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:latesteeff3738d708
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8
1
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:1.74.7_local500745200425
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8
1
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:1.75.1_local8eff42336169
curl@8.18.0-1ubuntu2.7
8.18.0-1ubuntu2.8
1

syft 1.42.1 · advisories as of 18 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.