StackRadar

CVE-2026-89158

Medium

Advisory

Published 11 Sept 2026In the index since 12 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.002
13th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,244
of 17,821 indexed, latest versions
Container images
2,255
deployed by those charts
Fix available
1 of 2
affected packages

CVE-2026-89158 affecting package nmap 7.95-5

Carried by container images the latest versions of 2,244 of 17,821 indexed charts deploy, on 2,255 images.

Affected packageAffected versionsFixed inImages
pcre2deb10.21-1, 10.34-7, 10.34-7ubuntu0.1, 10.39-3+ubuntu20.04.1+deb.sury.org+2+10 more10.42-1+deb12u1, 10.46-1~deb13u22,254
nmaprpm7.95-4.azl3no fix listed1
OSV records
DEBIAN-CVE-2026-89158UBUNTU-CVE-2026-89158AZL-101751
Trending
Rank 16 in indexed charts, since 12 Sept 2026. See the ranking →

Charts affected

2,244 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,255 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
redis/redis-stack-server:7.2.0-v10e44b2b49d059
pcre2@10.39-3ubuntu0.1
no fix listed
2
rotationalio/quarterdeck:0.16.00e7ad3a031dc
pcre2@10.42-1
10.42-1+deb12u1
2
safeglobal/safe-config-service:latest09a5e495c219
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
2
safeglobal/safe-transaction-service:latest80db836cc5d5
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
2
sigp/lighthouse:v8.1.344aa773dcf27
pcre2@10.39-3ubuntu0.1
no fix listed
2
sigp/lighthouse:latest9a62bb870545
pcre2@10.39-3ubuntu0.1
no fix listed
2
sikalabs/hello-world-server:latest5f49bf889a64
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
2
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
pcre2@10.34-7ubuntu0.1
no fix listed
2
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d469:2.18.12-branch.testing3.88744-f55b3414bd113093583
pcre2@10.42-1
10.42-1+deb12u1
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
pcre2@10.34-7ubuntu0.1
no fix listed
2
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
pcre2@10.39-3build1
no fix listed
2
taigaio/taiga-back:latest4beed8f62c9f
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
2
taigaio/taiga-protected:latestfd4568a97a59
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
2
testinprod/op-erigon:latest0a125bd77a2d
pcre2@10.42-1
10.42-1+deb12u1
2
tzahi12345/youtubedl-material:4.3.2:latest2f943d584711
pcre2@10.39-3ubuntu0.1
no fix listed
2
uffizzi/controller:latest0344805f267b
pcre2@10.42-1
10.42-1+deb12u1
2
valkey/valkey:83fbd2e3e4b6e
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
2
valkey/valkey:9.0.1546304417fea
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
2
valkey/valkey:8.1.481db6d39e1bb
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
2
valkey/valkey:9.1.08e8d64b405ce
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
2
vaultwarden/server:1.37.31587c45feaa4
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
2
vdiogov/glpi-conteiner:latest6945f84f0058
pcre2@10.42-1
10.42-1+deb12u1
2
wolveix/satisfactory-server:latest:v1.9.10e103700ae6ae
pcre2@10.39-3ubuntu0.1
no fix listed
2
zabbix/zabbix-agent:ubuntu-6.4-latest349b924472a7
pcre2@10.42-4ubuntu2
no fix listed
2
ghcr.io/appscode/inbox-server:latest:postgres-latest536358d7b17e
pcre2@10.39-3ubuntu0.1
no fix listed
2
ghcr.io/astriaorg/conductor:latest3ea8164b0eae
pcre2@10.42-1
10.42-1+deb12u1
2
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
pcre2@10.42-4ubuntu2.1
no fix listed
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
pcre2@10.42-4ubuntu2.1
no fix listed
2
ghcr.io/chroma-core/chroma:1.5.91e0b73a187a2
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
2
ghcr.io/codingducksrl/laravel:8.15be52524664c
pcre2@10.40-1+ubuntu22.04.1+deb.sury.org+1
no fix listed
2
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
pcre2@10.39-3build1
no fix listed
2
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
pcre2@10.42-1
10.42-1+deb12u1
2
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
pcre2@10.42-1
10.42-1+deb12u1
2
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
pcre2@10.34-7
no fix listed
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
pcre2@10.34-7
no fix listed
2
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
pcre2@10.34-7
no fix listed
2
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
pcre2@10.42-1
10.42-1+deb12u1
2
ghcr.io/immich-app/immich-machine-learning:v3.1.05a0839dc5303
pcre2@10.42-1
10.42-1+deb12u1
2
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
2
ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0bcf63357191b
pcre2@10.42-1
10.42-1+deb12u1
2
ghcr.io/libredb/libredb-studio:0.16.2c398419c29a7
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
2
ghcr.io/linuxserver/plex:latest7f9a1d574958
pcre2@10.46-1build1
no fix listed
2
ghcr.io/lissy93/web-check:latesta4e021c0f6a9
pcre2@10.42-1
10.42-1+deb12u1
2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss:unprivileged-oss-202503313db8145349a3
pcre2@10.42-1
10.42-1+deb12u1
2
ghcr.io/nucleuscloud/neosync/api:0.5.41e2abb798f29f
pcre2@10.42-1
10.42-1+deb12u1
2
ghcr.io/nucleuscloud/neosync/worker:0.5.4196f42450c5b1
pcre2@10.42-1
10.42-1+deb12u1
2
ghcr.io/openunison/openunison-kubernetes-operator:1.0.1392bd6c526c50
pcre2@10.42-4ubuntu2.1
no fix listed
2
ghcr.io/postgresml/pgcat:main245f9d2f5f5b
pcre2@10.42-1
10.42-1+deb12u1
2
ghcr.io/postgresml/pgcat:v1.2.0627761f6dcbc
pcre2@10.42-1
10.42-1+deb12u1
2
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
pcre2@10.42-1
10.42-1+deb12u1
2

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.