{"id":"CVE-2026-10052","title":"Quay/config-tool: quay/config-tool: ssrf via unfiltered ldap and smtp config validation endpoints","summary":"A flaw was found in the Quay config-tool's LDAP and SMTP validation functions. An attacker with config editor access can exploit these functions, which make outbound connections to user-supplied endpoints without proper IP or host filter…","severity":"medium","cvss":4.1,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N","cvssSource":"cna","cwe":["CWE-918"],"vendor":"Red Hat","product":"quay/quay-rhel8","affected":["quay/quay-rhel8 (all versions)","quay/quay-rhel9 (all versions)"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-05-29T16:23:22.893044Z"},"published":"2026-05-29","updated":"2026-11-01","sourceUpdated":"2026-11-01T05:26:37.556Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-10052","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-10052"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483157","label":"RHBZ#2483157"}],"tags":["cve.org"],"epss":0.00186,"epssPercentile":0.08294,"ingestedAt":"2026-11-05T18:28:50.696Z","slug":"CVE-2026-10052","body":"## Overview\n\nA flaw was found in the Quay config-tool's LDAP and SMTP validation functions. An attacker with config editor access can exploit these functions, which make outbound connections to user-supplied endpoints without proper IP or host filtering. This allows the attacker to perform internal network reconnaissance from the Quay pod's network position, potentially mapping the internal network infrastructure.\n\n## Affected\n\n- `quay/quay-rhel8 (all versions)`\n- `quay/quay-rhel9 (all versions)`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":23,"depthScoreParts":{"impact":22.5,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}