StackRadar

CVE-2026-8926

Critical

Advisory

Published 24 Jun 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.004
37th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
635
of 17,787 indexed, latest versions
Container images
461
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 635 of 17,787 indexed charts deploy, on 461 images.

Affected packageAffected versionsFixed inImages
curldeb8.14.1-2, 8.14.1-2+deb13u2, 8.14.1-2+deb13u3, 8.14.1-2+deb13u3+dhi3+9 more8.14.1-2ubuntu1.4, 8.18.0-1ubuntu2.2243
curlapk8.12.1-r0, 8.17.0-r1, 8.18.0-r0, 8.19.0-r0+2 more8.21.0-r0, 8.22.0-r0218
OSV records
ALPINE-CVE-2026-8926DEBIAN-CVE-2026-8926UBUNTU-CVE-2026-8926
Also known as
USN-8487-1

Charts affected

635 by stars
ChartLatestAffected imagesRadar Score
k10appk10app0.2.11 of 11See more

k10app k10app 0.2.1

1 of the 11 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

10,560
deltabadgerk8s-chartsVerified publisher2.0.01 of 1See more

deltabadger k8s-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

5,681
palworld-serverk8s-chartsVerified publisher1.2.11 of 1See more

palworld-server k8s-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.5.0b4ac9ee22483
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

3,433
bazarrk8s-home-lab-repo11.3.21 of 1See more

bazarr k8s-home-lab-repo 11.3.2

1 of the 1 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
ghcr.io/home-operations/bazarr:1.5.680cb090162b4
curl@8.20.0-r1
8.21.0-r0

Open the chart page →

1,795
floodk8s-home-lab-repo7.3.01 of 1See more

flood k8s-home-lab-repo 7.3.0

1 of the 1 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
jesec/flood:4.14.3c887dad96b40
curl@8.20.0-r1
8.21.0-r0

Open the chart page →

746
giteak8s-home-lab-repo2.6.01 of 1See more

gitea k8s-home-lab-repo 2.6.0

1 of the 1 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
gitea/gitea:1.26.27d13848af126
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

2,140
lidarrk8s-home-lab-repo15.3.11 of 1See more

lidarr k8s-home-lab-repo 15.3.1

1 of the 1 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
ghcr.io/home-operations/lidarr:3.1.29df1e14c8e09
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,568
paperlessk8s-home-lab-repo11.0.11 of 1See more

paperless k8s-home-lab-repo 11.0.1

1 of the 1 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

8,990
prowlarrk8s-home-lab-repo5.4.01 of 1See more

prowlarr k8s-home-lab-repo 5.4.0

1 of the 1 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
ghcr.io/home-operations/prowlarr:2.4.0b7da6e9defbe
curl@8.20.0-r1
8.21.0-r0

Open the chart page →

686
qbittorrentk8s-home-lab-repo14.5.01 of 1See more

qbittorrent k8s-home-lab-repo 14.5.0

1 of the 1 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
ghcr.io/home-operations/qbittorrent:5.2.224f2d793cb7f
curl@8.20.0-r1
8.21.0-r0

Open the chart page →

719
syslog-ngk8s-home-lab-repo3.1.11 of 1See more

syslog-ng k8s-home-lab-repo 3.1.1

1 of the 1 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/syslog-ng:4.10.247fae7f540f9
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

1,299
vaultwardenk8s-home-lab-repo6.2.31 of 1See more

vaultwarden k8s-home-lab-repo 6.2.3

1 of the 1 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
vaultwarden/server:1.35.79a8eec71f4a5
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

2,833
zileank8s-home-lab-repo1.0.11 of 1See more

zilean k8s-home-lab-repo 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
ghcr.io/thoroslives/zilean:v3.10.1bce6aca0f6ca
curl@8.12.1-r0
8.22.0-r0

Open the chart page →

2,025
k8s-mutating-admission-webhookk8s-mutating-admission-webhook1.15.11 of 1See more

k8s-mutating-admission-webhook k8s-mutating-admission-webhook 1.15.1

1 of the 1 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
udhos/k8s-mutating-admission-webhook:1.15.1e588db500edf
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

945
librephotosk8sonlabVerified publisher1.1.61 of 7See more

librephotos k8sonlab 1.1.6

1 of the 7 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
reallibrephotos/librephotos-proxy:1.0.398a13dabbadc
curl@8.14.1-2+deb13u3
no fix listed

Open the chart page →

14,833
authentikkagiso-me0.1.11 of 1See more

authentik kagiso-me 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

4,539
vaultwardenkagiso-me0.1.11 of 1See more

vaultwarden kagiso-me 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
vaultwarden/server:1.36.0-alpined3531610b486
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

886
jenkinskallakruparaju-jenkins1.0.01 of 1See more

jenkins kallakruparaju-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

2,487
kbot-self-hostedkbot-self-hostedVerified publisher0.1.82 of 7See more

kbot-self-hosted kbot-self-hosted 0.1.8

2 of the 7 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
clamav/clamav:1.4.3_base629a3050df6a
curl@8.17.0-r1
8.22.0-r0
gotenberg/gotenberg:8.30206a6c708fc6
curl@8.19.0-1~bpo13+1
no fix listed

Open the chart page →

32,522
web-chartkcilab0.1.01 of 1See more

web-chart kcilab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,839
web-chartkgw-ktcloudlab0.1.01 of 1See more

web-chart kgw-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,839
cdashkitwareVerified publisher0.19.01 of 3See more

cdash kitware 0.19.0

1 of the 3 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
kitware/cdash:v5.3.0d7767d9b9da4
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

12,131
nginx-chartkosunjo-nginx0.1.01 of 1See more

nginx-chart kosunjo-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,839
sweeperkrateo0.2.11 of 2See more

sweeper krateo 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
alpine/kubectl:1.36.01ee9df6316d4
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,505
mindsdbkronkltdVerified publisher0.1.01 of 1See more

mindsdb kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
mindsdb/mindsdb:latest163011c09299
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

9,652
pangolinkrzwiatrzyk0.11.01 of 1See more

pangolin krzwiatrzyk 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
fosrl/pangolin:1.13.0c32ad797ab96
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

3,442
web-chartktcloudhelm0.1.01 of 1See more

web-chart ktcloudhelm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,839
web-chartktcloudlab0.1.01 of 1See more

web-chart ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,839
web-chartktcloudlabstudent0.1.01 of 1See more

web-chart ktcloudlabstudent 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,839
web-chartktcloudljw0.1.01 of 1See more

web-chart ktcloudljw 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,839
aperagkubeblocksVerified publisher0.0.0-nightly1 of 3See more

aperag kubeblocks 0.0.0-nightly

1 of the 3 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

8,455
firefly-iiikubernetes-homelab-helm-chartsVerified publisher0.1.31 of 3See more

firefly-iii kubernetes-homelab-helm-charts 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.6.6ae69fdd95cde
curl@8.14.1-2+deb13u3
no fix listed

Open the chart page →

4,416
pocket-idkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 1See more

pocket-id kubernetes-homelab-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
ghcr.io/pocket-id/pocket-id:v2.7.045bdeaf3fcd6
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,513
scrutinykubernetes-homelab-helm-chartsVerified publisher0.2.21 of 3See more

scrutiny kubernetes-homelab-helm-charts 0.2.2

1 of the 3 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
ghcr.io/analogj/scrutiny:v0.9.2-web71be54e99608
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

5,519
syncthingkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 1See more

syncthing kubernetes-homelab-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
syncthing/syncthing:2.1.07c60eb0ec887
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,311
tor-proxykubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

tor-proxy kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
peterdavehello/tor-socks-proxy:latest0cc12d36d312
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,481
umamikubernetes-homelab-helm-chartsVerified publisher0.1.01 of 3See more

umami kubernetes-homelab-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
ghcr.io/umami-software/umami:3.1.0e3f80c0625aa
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

2,598
vaultwardenkubernetes-homelab-helm-chartsVerified publisher0.1.11 of 1See more

vaultwarden kubernetes-homelab-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.1ebdfe70701c6
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

2,032
forkliftkubevirt-forkliftVerified publisher0.3.01 of 2See more

forklift kubevirt-forklift 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
openresty/openresty:1.31.1.1-1-alpine-fatacd832254d9c
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

1,435
kube-wordpress-mysqlkube-wordpress-mysql0.1.01 of 2See more

kube-wordpress-mysql kube-wordpress-mysql 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
library/wordpress:php8.1-apachef73396626d2f
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

8,634
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.41 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

1 of the 9 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
curl@8.14.1-2
no fix listed

Open the chart page →

20,299
nginx-chartkyb-nginx0.1.01 of 1See more

nginx-chart kyb-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,839
stremiolbenicio-communityVerified publisher0.1.11 of 2See more

stremio lbenicio-community 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
lbenicio/stremio-web:latest732f9003de33
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

2,601
jenkinsleechistest2.7.11 of 2See more

jenkins leechistest 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

4,434
vaultwardenleprechaun-charts0.1.281 of 1See more

vaultwarden leprechaun-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.1ebdfe70701c6
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

2,032
librenmslibrenms10.1.11 of 5See more

librenms librenms 10.1.1

1 of the 5 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
librenms/librenms:26.8.28194a4a9ff49
curl@8.20.0-r0
8.22.0-r0

Open the chart page →

3,139
weblinzhengen0.1.71 of 1See more

web linzhengen 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,839
web-chartljw-ktcloudlab0.1.01 of 1See more

web-chart ljw-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,839
home-assistantlmatfyVerified publisher0.1.381 of 1See more

home-assistant lmatfy 0.1.38

1 of the 1 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2026.75a531753cea9
curl@8.20.0-r1
8.21.0-r0

Open the chart page →

2,450
jellyfinlmatfyVerified publisher0.1.31 of 1See more

jellyfin lmatfy 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-8926.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11aefb67e6a7ff
curl@8.14.1-2+deb13u3
no fix listed

Open the chart page →

2,615

Container images carrying it

461 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/deployhub/ms-nginx:svccat-v11.0.815-g717581d2d3400664e8
curl@8.17.0-r1
8.22.0-r0
1
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
curl@8.14.1-2+deb13u4
no fix listed
1
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
curl@8.14.1-2+deb13u2
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
curl@8.14.1-2+deb13u2
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.5.5-gitlab25b7636dfba3f
curl@8.14.1-2+deb13u4
no fix listed
1
registry.gitlab.com/shortlink-org/shortlink/bff:latestf2194e526915
curl@8.17.0-r1
8.22.0-r0
1
registry.gitlab.com/shortlink-org/shortlink/link:latest86d87291ffd4
curl@8.17.0-r1
8.22.0-r0
1
registry.gitlab.com/technostructures/posca/posca:latesta693021686ca
curl@8.17.0-r1
8.22.0-r0
1
registry.gitlab.com/xrow-public/helm-smtp/postfix:1.3.37eea4f0883dd
curl@8.20.0-r0
8.22.0-r0
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
curl@8.14.1-2
no fix listed
1
registry.k8s.io/provider-os/manila-csi-plugin:v1.36.0190976e2e2fe
curl@8.17.0-r1
8.22.0-r0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.