CVE record · 1 source
CVE-2026-123710
CVSS 9.8A flaw was found in Red Hat Quay.
- Vendor
- Red Hat
- Product
- Red Hat Quay 3, Red Hat Quay 5
- CVSS v3.1
- 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weakness
- CWE-1287
- Exposure class
- Developer platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
A flaw was found in Red Hat Quay.
A flaw was found in Red Hat Quay. An unauthenticated client can obtain an anonymous registry token with an audience it controls, present that token to the service key rotation endpoint, and install its own approved signing key…