CVE-2026-32591
- EPSS 0.26%
- Veröffentlicht 08.04.2026 17:06:58
- Zuletzt bearbeitet 30.06.2026 03:18:32
A flaw was found in Red Hat Quay's Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it p...
CVE-2026-32590
- EPSS 0.41%
- Veröffentlicht 08.04.2026 17:04:22
- Zuletzt bearbeitet 01.07.2026 02:17:00
A flaw was found in Red Hat Quay's handling of resumable container image layer uploads. The upload process stores intermediate data in the database using a format that, if tampered with, could allow an attacker to execute arbitrary code on the Quay s...
CVE-2026-32589
- EPSS 0.24%
- Veröffentlicht 08.04.2026 17:04:20
- Zuletzt bearbeitet 01.07.2026 13:17:03
A flaw was found in Red Hat Quay's container image upload process. An authenticated user with push access to any repository on the registry can interfere with image uploads in progress by other users, including those in repositories they do not have ...
CVE-2025-14243
- EPSS 0.29%
- Veröffentlicht 08.04.2026 16:41:55
- Zuletzt bearbeitet 21.04.2026 18:06:15
A flaw was found in the OpenShift Mirror Registry. This vulnerability allows an unauthenticated, remote attacker to enumerate valid usernames and email addresses via different error messages during authentication failures and account creation.
CVE-2026-2377
- EPSS 0.41%
- Veröffentlicht 08.04.2026 16:26:07
- Zuletzt bearbeitet 01.07.2026 13:16:58
A flaw was found in Red Hat Quay and mirror registry for Red Hat OpenShift. The log export feature in these products allows an authenticated user to specify an arbitrary callback URL. A backend process then makes server-side HTTP requests to this pro...