CVE-2026-94640
HighAdvisory
Published 22 Sept 2026In the index since 23 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.006
- 47th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 15
- of 17,939 indexed, latest versions
- Container images
- 14
- deployed by those charts
- Fix available
- None
- affected package
The matching OSV records carry no description.
Carried by container images the latest versions of 15 of 17,939 indexed charts deploy, on 14 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| rpcbinddeb | 0.2.3-0.2, 0.2.3-0.6ubuntu0.18.04.1, 1.2.5-8, 1.2.6-2build1+3 more | no fix listed | 14 |
- OSV records
- DEBIAN-CVE-2026-94640UBUNTU-CVE-2026-94640
Charts affected
15 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| csi-driver-nfscsi-driver-nfsVerified publisher | 4.13.4 | 1 of 6See more | 3,584 |
| music-assistantbdclark-helm-chartsVerified publisher | 0.4.13 | 1 of 1See more | 4,014 |
| iobrokereugen | 0.2.6 | 1 of 1See more | 11,928 |
| music-assistant-serverandibraeuVerified publisher | 2.1.2 | 1 of 1See more | 6,300 |
| csi-driver-nfsbook-k8sinfra-v2 | 4.12.1 | 1 of 6See more | 6,520 |
| icinga2geek-cookbookVerified publisher | 4.2.0 | 1 of 1See more | 10,234 |
| minecrafthelmforgeVerified publisher | 1.5.5 | 1 of 1See more | 4,227 |
| music-assistantkarljorgensen | 0.1.3 | 1 of 1See more | 7,684 |
| longhornkvalitetsitVerified publisher | 1.1.1-0 | 1 of 2See more | 17,047 |
| localpathprovisionermesosphere-stable | 0.1.2 | 1 of 1See more | 18,455 |
| minecraftpaul1365972-mc | 3.0.1 | 1 of 1See more | 4,465 |
| game-serverpvillaverdeVerified publisher | 1.0.6 | 1 of 1See more | 4,618 |
| checkmkrtomik-helm-chartsVerified publisher | 0.1.0 | 1 of 1See more | 8,416 |
| longhornwener | 1.2.3 | 1 of 2See more | 15,740 |
| longhornwenerme | 1.2.3 | 1 of 2See more | 15,740 |
Container images carrying it
14 by charts deploying them
A fixed version is listed for 0 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| longhornio/ | dca34321452c | rpcbind | no fix listed | 2 |
| checkmk/ | c11b422210c4 | rpcbind | no fix listed | 1 |
| itzg/ | 77280d10744f | rpcbind | no fix listed | 1 |
| itzg/ | de5d1b1a83eb | rpcbind | no fix listed | 1 |
| jordan/ | f75025fe8ea8 | rpcbind | no fix listed | 1 |
| longhornio/ | ede61fe2a472 | rpcbind | no fix listed | 1 |
| rancher/ | e66f32d19eb9 | rpcbind | no fix listed | 1 |
| ghcr.io/ | ca7dc7362968 | rpcbind | no fix listed | 1 |
| ghcr.io/ | 46919d151d39 | rpcbind | no fix listed | 1 |
| ghcr.io/ | 50666a6f8d7f | rpcbind | no fix listed | 1 |
| ghcr.io/ | 885872224fa5 | rpcbind | no fix listed | 1 |
| ghcr.io/ | eef3ee7810d0 | rpcbind | no fix listed | 1 |
| registry.k8s.io/ | 1eb5a85180a4 | rpcbind | no fix listed | 1 |
| registry.k8s.io/ | ce5b5ccd5eb0 | rpcbind | no fix listed | 1 |