StackRadar

CVE-2026-87875

Medium

Advisory

Published 9 Sept 2026In the index since 10 Sept 2026
Severity
Medium
worst across findings
CVSS
4.3
base score, highest
EPSS
0.003
25th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
222
of 17,781 indexed, latest versions
Container images
190
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 222 of 17,781 indexed charts deploy, on 190 images.

Affected packageAffected versionsFixed inImages
cupsdeb2.1.3-4ubuntu0.3, 2.1.3-4ubuntu0.4, 2.1.3-4ubuntu0.7, 2.1.3-4ubuntu0.10+32 moreno fix listed190
OSV records
DEBIAN-CVE-2026-87875UBUNTU-CVE-2026-87875
Trending
Rank 41 in indexed charts, since 11 Sept 2026. See the ranking →

Charts affected

222 by stars
ChartLatestAffected imagesRadar Score
speckle-server-branch-testingspeckleVerified publisher2.17.14-branch.testing.72707.921a5f81 of 5See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

1 of the 5 container images this version deploys carry CVE-2026-87875.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
cups@2.4.2-3+deb12u5
no fix listed

Open the chart page →

14,679
speckle-server-branch-testing1speckleVerified publisher2.20.6-branch.testing1.154030-9b091141 of 5See more

speckle-server-branch-testing1 speckle 2.20.6-branch.testing1.154030-9b09114

1 of the 5 container images this version deploys carry CVE-2026-87875.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
cups@2.4.2-3+deb12u5
no fix listed

Open the chart page →

16,400
speckle-server-branch-testing2speckleVerified publisher2.18.11-branch.testing2.88634-335d4691 of 5See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

1 of the 5 container images this version deploys carry CVE-2026-87875.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d4694bd113093583
cups@2.4.2-3+deb12u5
no fix listed

Open the chart page →

14,221
speckle-server-branch-testing3speckleVerified publisher2.18.12-branch.testing3.88744-f55b3411 of 5See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

1 of the 5 container images this version deploys carry CVE-2026-87875.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.18.12-branch.testing3.88744-f55b3414bd113093583
cups@2.4.2-3+deb12u5
no fix listed

Open the chart page →

14,221
speckle-server-branch-testing4speckleVerified publisher2.20.2-branch.testing4.134160-9fad4b21 of 5See more

speckle-server-branch-testing4 speckle 2.20.2-branch.testing4.134160-9fad4b2

1 of the 5 container images this version deploys carry CVE-2026-87875.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
cups@2.4.2-3+deb12u5
no fix listed

Open the chart page →

16,019
speckle-server-branch-testing5speckleVerified publisher2.21.3-branch.testing5.219631-2153bef1 of 5See more

speckle-server-branch-testing5 speckle 2.21.3-branch.testing5.219631-2153bef

1 of the 5 container images this version deploys carry CVE-2026-87875.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
cups@2.4.2-3+deb12u8
no fix listed

Open the chart page →

15,635
speckle-server-branch-testing6speckleVerified publisher2.25.10-branch.testing6.645-b125c1e1 of 4See more

speckle-server-branch-testing6 speckle 2.25.10-branch.testing6.645-b125c1e

1 of the 4 container images this version deploys carry CVE-2026-87875.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
cups@2.4.2-3+deb12u8
no fix listed

Open the chart page →

11,100
unifistartechnicaVerified publisher0.1.31 of 2See more

unifi startechnica 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-87875.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.1.664a3616625dda
cups@2.2.7-1ubuntu2.8
no fix listed

Open the chart page →

14,493
kurento_webrtc_demostunner0.1.01 of 2See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-87875.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
cups@2.4.7-1.2ubuntu7.4
no fix listed

Open the chart page →

12,460
stunner-kurento-one2one-callstunner0.1.01 of 2See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-87875.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
cups@2.4.7-1.2ubuntu7.4
no fix listed

Open the chart page →

12,460
flaresolverrsudo-kraken-flaresolverrVerified publisher2.1.41 of 1See more

flaresolverr sudo-kraken-flaresolverr 2.1.4

1 of the 1 container images this version deploys carry CVE-2026-87875.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
cups@2.4.2-3+deb12u9
no fix listed

Open the chart page →

33,583
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-87875.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
cups@2.3.1-9ubuntu1.3
no fix listed

Open the chart page →

18,756
stash-boxswuuper-githubVerified publisher0.1.11 of 2See more

stash-box swuuper-github 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-87875.

Container imageDigestPackageFixed in
stashapp/stash-box:latesta534c8afdf39
cups@2.4.7-1.2ubuntu7.3
no fix listed

Open the chart page →

8,193
owncloudth-chartsVerified publisher0.2.11 of 1See more

owncloud th-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-87875.

Container imageDigestPackageFixed in
owncloud/server:10.15.051d9b74fc2a8
cups@2.3.1-9ubuntu1.8
no fix listed

Open the chart page →

10,006
openunison-operatortremolo3.0.301 of 1See more

openunison-operator tremolo 3.0.30

1 of the 1 container images this version deploys carry CVE-2026-87875.

Container imageDigestPackageFixed in
ghcr.io/openunison/openunison-kubernetes-operator:1.0.11f4feb3323a29
cups@2.4.7-1.2ubuntu7.9
no fix listed

Open the chart page →

2,126
orchestratremolo3.1.552 of 5See more

orchestra tremolo 3.1.55

2 of the 5 container images this version deploys carry CVE-2026-87875.

Container imageDigestPackageFixed in
ghcr.io/openunison/openunison-k8s:1.0.509ad450220ab9
cups@2.4.7-1.2ubuntu7.9
no fix listed
ghcr.io/openunison/openunison-kubernetes-operator:1.0.11f4feb3323a29
cups@2.4.7-1.2ubuntu7.9
no fix listed

Open the chart page →

7,637
browserlessvictorlane0.2.01 of 1See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-87875.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
cups@2.4.7-1.2ubuntu7.9
no fix listed

Open the chart page →

4,305
calibre-webvista0.1.31 of 1See more

calibre-web vista 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-87875.

Container imageDigestPackageFixed in
linuxserver/calibre-web:0.6.24241009026e6f
cups@2.4.7-1.2ubuntu7.3
no fix listed

Open the chart page →

7,628
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-87875.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
cups@2.3.1-9ubuntu1.1
no fix listed

Open the chart page →

14,364
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-87875.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
cups@2.3.1-9ubuntu1.1
no fix listed

Open the chart page →

28,605
Wordpresswordpress-mariadb1.0.21 of 2See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-87875.

Container imageDigestPackageFixed in
library/wordpress:latest5a93c470ae82
cups@2.4.10-3+deb13u2
no fix listed

Open the chart page →

5,560
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-87875.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
cups@2.4.1op1-1ubuntu4.10
no fix listed

Open the chart page →

14,100

Container images carrying it

190 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
penpotapp/backend:2.2.147853d9bb9dd
cups@2.4.1op1-1ubuntu4.11
no fix listed
1
penpotapp/exporter:2.2.15c835ffd87ab
cups@2.4.1op1-1ubuntu4.11
no fix listed
1
penpotapp/exporter:2.17.272a8061e8806
cups@2.4.16-1ubuntu1.3
no fix listed
1
photoprism/photoprism:220629-jammy2954334adbda
cups@2.4.1op1-1ubuntu4.1
no fix listed
1
photoprism/photoprism:260601650c6ad5a651
cups@2.4.16-1ubuntu1
no fix listed
1
photoprism/photoprism:260728958642220223
cups@2.4.16-1ubuntu1.3
no fix listed
1
photoprism/photoprism:240711-cefc6fd632ca74
cups@2.4.7-1.2ubuntu7.2
no fix listed
1
project2team4/react:latest3ff031a08887
cups@2.3.1-9ubuntu1.1
no fix listed
1
qonstrukt/php:8.4-v8-apache089af7925aa1
cups@2.4.7-1.2ubuntu7.14
no fix listed
1
rundeck/rundeck:3.2.74d64fe56f767
cups@2.1.3-4ubuntu0.11
no fix listed
1
rundeck/rundeck:3.0.16b13e8059ad72
cups@2.1.3-4ubuntu0.7
no fix listed
1
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
cups@2.4.2-3+deb12u4
no fix listed
1
scrapinghub/splash:3.4.1a5f89bc84606
cups@2.2.7-1ubuntu2.7
no fix listed
1
selenium/node-chrome:4.48.0-202609055ac71fd8dd1e
cups@2.4.7-1.2ubuntu7.14
no fix listed
1
selenium/node-firefox:4.48.0-2026090574a5c1c90f95
cups@2.4.7-1.2ubuntu7.14
no fix listed
1
sismics/docs:v1.10f4b0ef019cf1
cups@2.2.7-1ubuntu2.8
no fix listed
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
cups@2.4.2-3+deb12u8
no fix listed
1
socialmediamacroscope/autophrase:0.1.570fb11d4f531
cups@2.3.1-9ubuntu1.6
no fix listed
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
cups@2.3.1-9ubuntu1.2
no fix listed
1
sondresjo/garge-api:v2.12.5a7484b916ee4
cups@2.4.7-1.2ubuntu7.14
no fix listed
1
speckle/speckle-preview-service:2.26.3092384dba45d
cups@2.4.2-3+deb12u9
no fix listed
1
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
cups@2.4.2-3+deb12u5
no fix listed
1
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
cups@2.4.2-3+deb12u8
no fix listed
1
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
cups@2.4.2-3+deb12u8
no fix listed
1
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
cups@2.4.2-3+deb12u8
no fix listed
1
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
cups@2.4.2-3+deb12u5
no fix listed
1
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
cups@2.4.2-3+deb12u5
no fix listed
1
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
cups@2.4.2-3+deb12u5
no fix listed
1
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
cups@2.4.2-3+deb12u5
no fix listed
1
stashapp/stash-box:latesta534c8afdf39
cups@2.4.7-1.2ubuntu7.3
no fix listed
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
cups@2.3.1-9ubuntu1.3
no fix listed
1
swimmwatch/cloakbrowser-mcp:1.13.0d48c705a58c8
cups@2.4.2-3+deb12u9
no fix listed
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
cups@2.1.3-4ubuntu0.4
no fix listed
1
thingsboard/tb-postgres:latest2d17e4e36edc
cups@2.4.2-3+deb12u9
no fix listed
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
cups@2.1.3-4ubuntu0.3
no fix listed
1
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
cups@2.4.10-3+deb13u2
no fix listed
1
trueosiris/vrising:latest9356f98ad561
cups@2.4.1op1-1ubuntu4.16
no fix listed
1
wavefronthq/proxy:9.2d1064d28f6eb
cups@2.2.7-1ubuntu2.8
no fix listed
1
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
cups@2.4.1op1-1ubuntu4.10
no fix listed
1
zabbix/zabbix-web-service:ubuntu-7.0.23915b3183e054
cups@2.3.3op2-3+deb11u8
no fix listed
1
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
cups@2.4.1op1-1ubuntu4.1
no fix listed
1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
cups@2.4.10-3+deb13u2
no fix listed
1
ghcr.io/argonix-io/argonix-api:1.0.068e17a8aaa40
cups@2.4.10-3+deb13u2
no fix listed
1
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
cups@2.4.2-3+deb12u8
no fix listed
1
ghcr.io/browserless/chrome:v2.56.7d600eac6283f
cups@2.4.7-1.2ubuntu7.14
no fix listed
1
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
cups@2.4.7-1.2ubuntu7.14
no fix listed
1
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
cups@2.4.7-1.2ubuntu7.9
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.40d28dbd95b03
cups@2.4.2-3+deb12u9
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.369b1d3c09cfa
cups@2.4.2-3+deb12u9
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
cups@2.4.2-3+deb12u8
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.