StackRadar

CVE-2026-90462

Medium

Advisory

Published 22 Sept 2026In the index since 24 Sept 2026
Severity
Medium
worst across findings
CVSS
5.4
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
9
of 17,966 indexed, latest versions
Container images
7
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 9 of 17,966 indexed charts deploy, on 7 images.

Affected packageAffected versionsFixed inImages
sssddeb1.16.1-1ubuntu1.8, 2.2.3-3ubuntu0.8, 2.2.3-3ubuntu0.12, 2.6.3-1ubuntu3.5+3 moreno fix listed7
OSV records
UBUNTU-CVE-2026-90462

Charts affected

9 by stars
ChartLatestAffected imagesRadar Score
mssqlserver-2022simcube1.2.31 of 1See more

mssqlserver-2022 simcube 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-90462.

Container imageDigestPackageFixed in
mcr.microsoft.com/mssql/server:2022-latest4402d880dd4c
sssd@2.6.3-1ubuntu3.8
no fix listed

Open the chart page →

2,873
self-hostbitwarden2.5.01See more

self-host bitwarden 2.5.0

1 container image this version deploys carries CVE-2026-90462.

Container imageDigestPackageFixed in
mcr.microsoft.com/mssql/server:2025-CU5-ubuntu-24.04cee0f4db03b5
sssd@2.9.4-1.1ubuntu6.4
no fix listed

Open the chart page →

—
mssqlserver-2019simcube1.2.31 of 1See more

mssqlserver-2019 simcube 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-90462.

Container imageDigestPackageFixed in
mcr.microsoft.com/mssql/server:2019-CU16-ubuntu-20.0449a57dc220b1
sssd@2.2.3-3ubuntu0.8
no fix listed

Open the chart page →

7,207
faasnetfaasnet0.0.41 of 5See more

faasnet faasnet 0.0.4

1 of the 5 container images this version deploys carry CVE-2026-90462.

Container imageDigestPackageFixed in
mcr.microsoft.com/mssql/server:latest2b5b58162112
sssd@2.9.4-1.1ubuntu6.7
no fix listed

Open the chart page →

7,563
adventureworkskronkltdVerified publisher0.1.01 of 1See more

adventureworks kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-90462.

Container imageDigestPackageFixed in
chriseaton/adventureworks:latest54c3384ce701
sssd@2.6.3-1ubuntu3.5
no fix listed

Open the chart page →

4,809
myweatherhelmmyweather1.3.111 of 7See more

myweatherhelm myweather 1.3.11

1 of the 7 container images this version deploys carry CVE-2026-90462.

Container imageDigestPackageFixed in
mcr.microsoft.com/mssql/server:2017-latestfbf79e0fea59
sssd@1.16.1-1ubuntu1.8
no fix listed

Open the chart page →

19,164
todoapitodoapi-appVerified publisher0.1.01 of 2See more

todoapi todoapi-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-90462.

Container imageDigestPackageFixed in
mcr.microsoft.com/mssql/server:2017-latestfbf79e0fea59
sssd@1.16.1-1ubuntu1.8
no fix listed

Open the chart page →

7,240
myweatherhelmwebapp11.3.501 of 8See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2026-90462.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
sssd@2.2.3-3ubuntu0.12
no fix listed

Open the chart page →

9,794
myweatherhelm-schedulingwebapp11.3.921 of 9See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2026-90462.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
sssd@2.2.3-3ubuntu0.12
no fix listed

Open the chart page →

9,794

Container images carrying it

7 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
sssd@2.2.3-3ubuntu0.12
no fix listed
2
mcr.microsoft.com/mssql/server:2017-latestfbf79e0fea59
sssd@1.16.1-1ubuntu1.8
no fix listed
2
chriseaton/adventureworks:latest54c3384ce701
sssd@2.6.3-1ubuntu3.5
no fix listed
1
mcr.microsoft.com/mssql/server:latest2b5b58162112
sssd@2.9.4-1.1ubuntu6.7
no fix listed
1
mcr.microsoft.com/mssql/server:2022-latest4402d880dd4c
sssd@2.6.3-1ubuntu3.8
no fix listed
1
mcr.microsoft.com/mssql/server:2019-CU16-ubuntu-20.0449a57dc220b1
sssd@2.2.3-3ubuntu0.8
no fix listed
1
mcr.microsoft.com/mssql/server:2025-CU5-ubuntu-24.04cee0f4db03b5
sssd@2.9.4-1.1ubuntu6.4
no fix listed
1

syft 1.42.1 · advisories as of 30 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.