CVE-2026-2376Medium· 4.9▾ TwilightPoC availableA flaw was found in mirror-registry where an authenticated user can trick the system into accessing unintended internal or restricted systems by providing malicious web addresses. When the application processes these addresses, it auto…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 27 · likelihood 0 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Exploit-prediction probability, daily snapshots since Nov 5.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.2%
A flaw was found in mirror-registry where an authenticated user can trick the system into accessing unintended internal or restricted systems by providing malicious web addresses.
When the application processes these addresses, it automatically follows redirects without verifying the final destination, allowing attackers to route requests to systems they should not have access to.
openshift/mirror-registry-rhel8 (all versions)openshift/mirror-registry-rhel8 (all versions)quay/quay-rhel8 (all versions)quay/quay-rhel9 (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2011-1594Medium· 6.5Spacewalk: spacewalk: open redirect vulnerability enables phishing attacks via url parameter
CVE-2026-118425Medium· 6.8Keycloak-services: keycloak-services: redirect uri domain allowlist bypass via dns resolution to loopback
CVE-2026-85471Medium· 6.4A flaw was found in Quay
CVE-2025-50181Medium· 5.3urllib3: urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation (CVE-2025-50181)
CVE-2025-50182Medium· 5.3urllib3: urllib3 does not control redirects in browsers and Node.js (CVE-2025-50182)
CVE-2026-123876Medium· 4.4Podman: containers-common: containers-common: default seccomp af_vsock/netlink_audit deny rules bypassable via 32-bit truncation