StackRadar

CVE-2026-86805

Medium

Advisory

Published 22 Sept 2026In the index since 23 Sept 2026
Severity
Medium
worst across findings
CVSS
6.3
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,725
of 17,879 indexed, latest versions
Container images
2,754
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 2,725 of 17,879 indexed charts deploy, on 2,754 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+66 more2.41-12+deb13u4+e32,747
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
OSV records
DEBIAN-CVE-2026-86805UBUNTU-CVE-2026-86805ECHO-3f84-a5f3-00c4
Trending
Rank 2 in indexed charts, since 23 Sept 2026. See the ranking →

Charts affected

2,725 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,754 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
glibc@2.41-12+deb13u3
no fix listed
5
artifacthub/postgres:latest4fd34fa635cc
glibc@2.41-12
no fix listed
4
bitnamilegacy/mariadb:12.0.2-debian-12-r0888cdaae3cb9
glibc@2.36-9+deb12u10
no fix listed
4
bitnamilegacy/mysql:9.4.0-debian-12-r1ec13e229247a
glibc@2.36-9+deb12u10
no fix listed
4
bitnamilegacy/postgresql:16233f361c5819
glibc@2.36-9+deb12u9
no fix listed
4
bitnamilegacy/rabbitmq:4.1.2:4.1.2-debian-12-r1fac502149c40
glibc@2.36-9+deb12u10
no fix listed
4
cloudflare/cloudflared:2026.3.06b599ca3e974
glibc@2.41-12+deb13u1
no fix listed
4
flaresolverr/flaresolverr:latest:v3.5.0139dfee1c6f8
glibc@2.36-9+deb12u14
no fix listed
4
fluent/fluent-bit:5.1.2:latestd792375ca8e5
glibc@2.41-12+deb13u3
no fix listed
4
hyperledger/fabric-ca:latesta70b6ba64a08
glibc@2.35-0ubuntu3.13
no fix listed
4
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
glibc@2.23-0ubuntu10
no fix listed
4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
glibc@2.23-0ubuntu11
no fix listed
4
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
glibc@2.35-0ubuntu3.5
no fix listed
4
library/memcached:1.6.45d956c0a57fd7
glibc@2.41-12+deb13u4
no fix listed
4
library/mongo:5.0-focal5e15a3f014ed
glibc@2.31-0ubuntu9.17
no fix listed
4
library/mongo:4.2.12-bionic628741415fc9
glibc@2.27-3ubuntu1.4
no fix listed
4
library/mongo:4.4.66efa05203990
glibc@2.27-3ubuntu1.4
no fix listed
4
library/nginx:1.27.1287ff321f9e3
glibc@2.36-9+deb12u8
no fix listed
4
library/postgres:134689940c6838
glibc@2.41-12
no fix listed
4
library/rabbitmq:3.11-managementc3f70098e01d
glibc@2.35-0ubuntu3.6
no fix listed
4
library/redis:7:7.4:7.4.11c6eabf748fc7
glibc@2.36-9+deb12u14
no fix listed
4
library/redis:8.10.2d5ac52db24d4
glibc@2.41-12+deb13u4
no fix listed
4
mastercloudapps/planner:v1.2340a950b311b2
glibc@2.35-0ubuntu3.1
no fix listed
4
opea/llm-tgi:1.00c25aab3f106
glibc@2.36-9+deb12u8
no fix listed
4
oscarsotosanchez/weatherservice:v1.0911ec961d10b
glibc@2.27-3ubuntu1.4
no fix listed
4
shashkist/flask-contacts-app:latest581de1fd6084
glibc@2.36-9+deb12u9
no fix listed
4
valkey/valkey:9.1.2:latest418652cfb58e
glibc@2.41-12+deb13u4
no fix listed
4
valkey/valkey:9.0.2930b41430fb7
glibc@2.41-12+deb13u1
no fix listed
4
valkey/valkey:9.1.2:latestc123e3715db6
glibc@2.41-12+deb13u3
no fix listed
4
vaultwarden/server:1.37.2:latest094b5689ed81
glibc@2.41-12+deb13u3
no fix listed
4
xenondb/percona:5.7.330e26872a2b67
glibc@2.31-0ubuntu9.2
no fix listed
4
ghcr.io/flaresolverr/flaresolverr:latest:v3.5.2c80ae007ce2c
glibc@2.36-9+deb12u14
no fix listed
4
ghcr.io/foundry-rs/foundry:latest0c00cb0bda1a
glibc@2.35-0ubuntu3.13
no fix listed
4
ghcr.io/kubedb/kubedb-autoscaler:v0.51.05d1182ac21f0
glibc@2.36-9+deb12u14
no fix listed
4
ghcr.io/kubedb/kubedb-crd-manager:v0.21.09506a6cb98d1
glibc@2.36-9+deb12u14
no fix listed
4
ghcr.io/kubedb/kubedb-ops-manager:v0.53.06d4c9fe66e4f
glibc@2.36-9+deb12u14
no fix listed
4
ghcr.io/kubedb/kubedb-provisioner:v0.66.0e7041c3b41e7
glibc@2.36-9+deb12u14
no fix listed
4
ghcr.io/kubevault/vault-operator:v0.25.0c8e042b5cee8
glibc@2.36-9+deb12u14
no fix listed
4
quay.io/argoproj/argocd:v3.5.3dd3f47d5a5e4
glibc@2.43-2ubuntu2.4
no fix listed
4
apache/apisix:3.18.0-ubuntu9ee5df1611f9
glibc@2.39-0ubuntu8.8
no fix listed
3
apache/apisix-ingress-controller:2.2.05c5efa4c7f2a
glibc@2.36-9+deb12u14
no fix listed
3
apache/superset:6.1.0:latest16b50bbef664
glibc@2.36-9+deb12u14
no fix listed
3
bitnamilegacy/etcd:latest99b408c15272
glibc@2.36-9+deb12u10
no fix listed
3
bitnamilegacy/kubectl:latestcd354d5b2556
glibc@2.36-9+deb12u10
no fix listed
3
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
glibc@2.36-9+deb12u10
no fix listed
3
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
glibc@2.36-9+deb12u10
no fix listed
3
bitnamilegacy/postgresql:17.6.0-debian-12-r0de520acd66fc
glibc@2.36-9+deb12u10
no fix listed
3
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
glibc@2.36-9+deb12u9
no fix listed
3
bitnamilegacy/postgresql-repmgr:17.6.0-debian-12-r2f12387ec882b
glibc@2.36-9+deb12u10
no fix listed
3
bitnamilegacy/valkey-cluster:8.1.3-debian-12-r332869e769b7e
glibc@2.36-9+deb12u10
no fix listed
3

syft 1.42.1 · advisories as of 25 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.