StackRadar

CVE-2026-89160

Medium

Advisory

Published 11 Sept 2026In the index since 12 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.002
12th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,270
of 17,813 indexed, latest versions
Container images
2,246
deployed by those charts
Fix available
1 of 2
affected packages

CVE-2026-89160 affecting package nmap 7.95-5

Carried by container images the latest versions of 2,270 of 17,813 indexed charts deploy, on 2,246 images.

Affected packageAffected versionsFixed inImages
pcre2deb10.21-1, 10.34-7, 10.34-7ubuntu0.1, 10.39-3+ubuntu20.04.1+deb.sury.org+2+10 more10.42-1+deb12u1, 10.46-1~deb13u22,245
nmaprpm7.95-4.azl3no fix listed1
OSV records
DEBIAN-CVE-2026-89160UBUNTU-CVE-2026-89160AZL-101745
Trending
Rank 11 in indexed charts, since 12 Sept 2026. See the ranking →

Charts affected

2,270 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,246 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
pcre2@10.42-1
10.42-1+deb12u1
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
pcre2@10.34-7ubuntu0.1
no fix listed
1
sysnet4admin/colosseum-agg:logbc25b152d88e
pcre2@10.39-3ubuntu0.1
no fix listed
1
sysnet4admin/colosseum-cms:loge74b43c7f492
pcre2@10.42-1
10.42-1+deb12u1
1
sysnet4admin/colosseum-prm:log5802bfcd7fed
pcre2@10.42-1
10.42-1+deb12u1
1
sysnet4admin/colosseum-rwd:log74ded2d92f07
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
tautulli/tautulli:latest670e68dd9efc
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
tchiotludo/akhq:0.28.0c2824dc2ae44
pcre2@10.46-1build1
no fix listed
1
teknas09/bird-pod:latest12a1fa85c4aa
pcre2@10.42-1
10.42-1+deb12u1
1
tensorflow/serving:latest8a208c232297
pcre2@10.39-3ubuntu0.1
no fix listed
1
tensorzero/gateway:2026.6.0c939db4f27e4
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
tensorzero/ui:2026.6.0f2563d54724e
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
tenureai/tenure:v1.0.285f5b222df9a5
pcre2@10.46-1~deb13u1+dhi1
10.46-1~deb13u2
1
teslamate/teslamate:4.1.1cc87082e7d67
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
testinprod/op-erigon:latest0a125bd77a2d
pcre2@10.42-1
10.42-1+deb12u1
1
thecampagnards/trafficlight-api:main7dca9d973837
pcre2@10.34-7
no fix listed
1
themoah/klag:0.2.16610579160052
pcre2@10.42-4ubuntu2.1
no fix listed
1
theradius/loggia:0.463ba348546ec
pcre2@10.42-1
10.42-1+deb12u1
1
thesisrobot/bitcoind:v23.016b368e4d52c
pcre2@10.39-3ubuntu0.1
no fix listed
1
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
thijsvanloef/palworld-server-docker:v2.5.0b4ac9ee22483
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
thingsboard/tbmq-integration-executor:2.4.0b5a9c1addf80
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
thingsboard/tbmq-node:2.4.070661025dba5
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
thingsboard/tb-postgres:latest2d17e4e36edc
pcre2@10.42-1
10.42-1+deb12u1
1
thmmniii/fbs-core:v1.27.15438517d9fc2
pcre2@10.39-3build1
no fix listed
1
thongngo3301/stakefish:latesta341af5976e3
pcre2@10.42-1
10.42-1+deb12u1
1
tiago2/cap:2.159f5ae4e261e
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
tianon/exim4:latestb489049cdbca
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
tibyandocker/serviceexample:latesta4ad592cea84
pcre2@10.42-1
10.42-1+deb12u1
1
timescale/timescaledb-ha:pg164f288c0a5213
pcre2@10.39-3ubuntu0.1
no fix listed
1
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
pcre2@10.39-3ubuntu0.1
no fix listed
1
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
pcre2@10.39-3ubuntu0.1
no fix listed
1
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
pcre2@10.39-3ubuntu0.1
no fix listed
1
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
pcre2@10.39-3build1
no fix listed
1
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
tock/gen-ai-orchestrator-server:25.10.7abf7880e0449
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
tombursch/kitchenowl-backend:v0.7.8b48e4ab727cd
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
treskon/portrait:DEV-latest88e813f22347
pcre2@10.46-1build1
no fix listed
1
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
pcre2@10.42-1
10.42-1+deb12u1
1
trinodb/trino:405ee80ab5eeab2
pcre2@10.39-3ubuntu0.1
no fix listed
1
trueosiris/vrising:latest9356f98ad561
pcre2@10.39-3ubuntu0.1
no fix listed
1
tussanakorndev/kube-pod-alerts:1.0.5216fdadadf9a
pcre2@10.46-1~deb13u1
10.46-1~deb13u2
1
twentycrm/twenty-postgres-spilo:latest2f78405a78be
pcre2@10.39-3ubuntu0.1
no fix listed
1
typesense/typesense:0.25.1035ccfbc3fd8
pcre2@10.39-3ubuntu0.1
no fix listed
1
typesense/typesense:30.191604dc128e2
pcre2@10.39-3ubuntu0.1
no fix listed
1
typesense/typesense:28.0.rc35dea1b62b7b6e
pcre2@10.39-3ubuntu0.1
no fix listed
1
ubuntu/bind9:9.16-20.04_beta5ee73f44e5d0
pcre2@10.34-7ubuntu0.1
no fix listed
1
ubuntu/squid:5.2-22.04_beta723891b5bc74
pcre2@10.39-3ubuntu0.1
no fix listed
1
unitbuilds/velocity-workflow:1.0.0f85a34f5bb28
pcre2@10.42-4ubuntu2.1
no fix listed
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
pcre2@10.42-1
10.42-1+deb12u1
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.