CVE-2026-74247Medium· 4.2▾ SunlitA flaw was found in Red Hat Quay. A user with FEATURE_BUILD_SUPPORT enabled and repository write access can exploit a Server-Side Request Forgery (SSRF) vulnerability within the build API. This allows the user to provide a malicious URL,…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 23.1 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Exploit-prediction probability, daily snapshots since Nov 5.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.2%
A flaw was found in Red Hat Quay. A user with FEATURE_BUILD_SUPPORT enabled and repository write access can exploit a Server-Side Request Forgery (SSRF) vulnerability within the build API. This allows the user to provide a malicious URL, causing the Quay builder to make requests to internal network addresses. Such an action could lead to the disclosure of sensitive internal information.
openshift-update-service/openshift-update-service-rhel8 (all versions)quay/quay-rhel8 (all versions)quay/quay-rhel9 (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
To mitigate this issue, disable the FEATURE_BUILD_SUPPORT feature in Red Hat Quay if it is not essential for your operations. This action prevents the vulnerable build API endpoint from being exploited. Refer to the Red Hat Quay product documentation for detailed instructions on managing and disabling features.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-16910Medium· 5.5Quay: ssrf in red hat quay notification webhooks (slack/generic)
CVE-2026-74243Medium· 6.5Quay: unauthenticated secscan notification endpoint in quay when psk is unset
CVE-2026-74241Medium· 4.8Quay: ldap referral filter injection in quay external ldap authentication
CVE-2026-74245Medium· 5.9Quay: unauthenticated exported logs download in quay
CVE-2024-6538Medium· 5.3A flaw was found in OpenShift Console
CVE-2026-13451High· 7.7Kserve: kserve: server-side request forgery via malicious storageuri