StackRadar

CVE-2026-86805

Medium

Advisory

Published 22 Sept 2026In the index since 23 Sept 2026
Severity
Medium
worst across findings
CVSS
6.3
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,725
of 17,879 indexed, latest versions
Container images
2,754
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 2,725 of 17,879 indexed charts deploy, on 2,754 images.

Affected packageAffected versionsFixed inImages
glibcdeb2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+66 more2.41-12+deb13u4+e32,747
eglibcdeb2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 moreno fix listed7
OSV records
DEBIAN-CVE-2026-86805UBUNTU-CVE-2026-86805ECHO-3f84-a5f3-00c4
Trending
Rank 1 in indexed charts, since 23 Sept 2026. See the ranking →

Charts affected

2,725 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,754 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/devtron/casbin:172ef62b-9450794d-464-394225bf041aacadd
glibc@2.39-0ubuntu8.3
no fix listed
3
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
glibc@2.39-0ubuntu8.3
no fix listed
3
quay.io/devtron/chart-sync:3b3d6d0e-836-39296721b5c9634d4
glibc@2.39-0ubuntu8.3
no fix listed
3
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
glibc@2.39-0ubuntu8.3
no fix listed
3
quay.io/devtron/google-chat-alert-manager:v2.0.239f2c6e0af38
glibc@2.31-0ubuntu9.7
no fix listed
3
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
glibc@2.39-0ubuntu8.3
no fix listed
3
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
glibc@2.23-0ubuntu11.3
no fix listed
3
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
glibc@2.35-0ubuntu3.1
no fix listed
3
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
glibc@2.39-0ubuntu8.3
no fix listed
3
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
glibc@2.39-0ubuntu8.3
no fix listed
3
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
glibc@2.36-9+deb12u13
no fix listed
3
actualbudget/actual-server:26.9.0552beab3dec8
glibc@2.36-9+deb12u14
no fix listed
2
alazidis/kube-netlag:1.1.00e8c84152201
glibc@2.39-0ubuntu8.7
no fix listed
2
apache/druid:37.0.00116fb802786
glibc@2.36-9+deb12u13
no fix listed
2
apache/iotdb:0.13.3-nodeafa47bf1692a
glibc@2.31-0ubuntu9.9
no fix listed
2
apache/nifi-registry:1.26.07cdfd8deec92
glibc@2.35-0ubuntu3.7
no fix listed
2
apache/rocketmq:5.4.0319cd8a81ed1
glibc@2.39-0ubuntu8.7
no fix listed
2
apache/tika:2.9.0.092d055a84e9e
glibc@2.35-0ubuntu3.1
no fix listed
2
apache/tika:2.9.2.1-fullae0b86d3c4d0
glibc@2.39-0ubuntu8.1
no fix listed
2
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
glibc@2.36-9+deb12u10
no fix listed
2
bitnamilegacy/mariadb:11.4.5-debian-12-r933ce23601fc9
glibc@2.36-9+deb12u10
no fix listed
2
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
glibc@2.36-9+deb12u8
no fix listed
2
bitnamilegacy/redis:latest5927ff3702df
glibc@2.36-9+deb12u10
no fix listed
2
bitnami/minideb:latest3e8d78d6682d
glibc@2.41-12+deb13u4
no fix listed
2
blockstack/stacks-core:3.2.0.0.0f79944317326
glibc@2.36-9+deb12u10
no fix listed
2
cfssl/cfssl:latest:v1.6.5c9018c2ddf0b
glibc@2.36-9+deb12u4
no fix listed
2
chromedp/headless-shell:148.0.7778.97313ed7255ae1
glibc@2.41-12+deb13u2
no fix listed
2
clickhouse/clickhouse-server:24.2ed9640bfff07
glibc@2.31-0ubuntu9.15
no fix listed
2
cloudflare/cloudflared:2026.6.16d91c121b803
glibc@2.41-12+deb13u3
no fix listed
2
cribl/cribl:4.20.1b3c6faf8340c
glibc@2.39-0ubuntu8.9
no fix listed
2
csiplugin/csi-neonsan:v1.2.21fa83d45417f
glibc@2.23-0ubuntu11.3
no fix listed
2
dagster/user-code-example:1.13.24206c454797f7
glibc@2.41-12+deb13u4
no fix listed
2
datagrok/grok_connect:latestf5876d3aebb8
glibc@2.35-0ubuntu3.14
no fix listed
2
dbeaver/cloudbeaver:21.3.00c0985098263
glibc@2.31-0ubuntu9.2
no fix listed
2
deepflowce/clickhouse-server:22.8.6.71bc1882f75c18
glibc@2.31-0ubuntu9.9
no fix listed
2
envoyproxy/gateway:v1.9.10049bcb384c5
glibc@2.41-12+deb13u3
no fix listed
2
eqalpha/keydb:latest6537505c4235
glibc@2.31-0ubuntu9.12
no fix listed
2
eqalpha/keydb:x86_64_v6.3.4eceb1806730c
glibc@2.31-0ubuntu9.12
no fix listed
2
fireflyiii/core:version-6.5.9fe4ecec4c2ba
glibc@2.41-12+deb13u2
no fix listed
2
fireflyiii/data-importer:version-2.2.3ab52bf932546
glibc@2.41-12+deb13u2
no fix listed
2
flashcatcloud/categraf:latest42e6ab16472e
glibc@2.39-0ubuntu8.7
no fix listed
2
freeradius/freeradius-server:3.0.2121c8bfa904d8
glibc@2.27-3ubuntu1
no fix listed
2
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
glibc@2.31-0ubuntu9.2
no fix listed
2
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
glibc@2.31-0ubuntu9.2
no fix listed
2
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
glibc@2.31-0ubuntu9.2
no fix listed
2
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
glibc@2.31-0ubuntu9.2
no fix listed
2
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
glibc@2.31-0ubuntu9.2
no fix listed
2
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
glibc@2.31-0ubuntu9.2
no fix listed
2
gisaia/arlas-permissions-server:28.0.0e612fc722e02
glibc@2.41-12+deb13u2
no fix listed
2
gisaia/arlas-persistence-server:28.0.0f667e0ee79be
glibc@2.41-12+deb13u2
no fix listed
2

syft 1.42.1 · advisories as of 25 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.