CVE Feed

    Dashboard / CVE / CVE-2026-10052

    CVE-2026-10052

    A flaw was found in the Quay config-tool's LDAP and SMTP validation functions. An attacker with config editor access can exploit these functions, which make outbound connections to user-supplied endpoints without proper IP or host filtering. This allows the attacker to perform internal network reconnaissance from the Quay pod's network position, potentially mapping the internal network infrastructure.

    Published:May 29, 2026
    Last Modified:May 29, 2026
    EPS:May 29, 2026
    EPSS Score:0.00023
    CVSS Score:4.1

    Affected Products

    Vendor
    Redhat
    Product
    Quay

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-664 Server Side Request Forgery

    Related CVEs

    CVE-2026-74244 (CVSS 5.9) — A flaw was found in Red Hat Quay's Stripe billing webhook handler. This vulnerability allows an unauthenticate…
    CVE-2026-74243 (CVSS 6.5) — A flaw was found in Red Hat Quay. When the SECURITY_SCANNER_V4_PSK (pre-shared key) is not set, a remote unaut…
    CVE-2026-74241 (CVSS 4.8) — A flaw was found in Red Hat Quay's external Lightweight Directory Access Protocol (LDAP) authentication handli…
    CVE-2026-74242 (CVSS 5.3) — A flaw was found in Red Hat Quay. An administrator of any repository, by knowing or guessing a target notifica…
    CVE-2026-74245 (CVSS 5.9) — A flaw was found in Red Hat Quay's exported logs feature. An unauthenticated attacker with a valid file ID cou…
    CVE-2026-74240 (CVSS 5.4) — A flaw was found in Red Hat Quay's JWT (JSON Web Token) validation for federated robot accounts and single sig…
    CVE-2026-74247 (CVSS 4.2) — A flaw was found in Red Hat Quay. A user with FEATURE_BUILD_SUPPORT enabled and repository write access can ex…
    CVE-2026-19730 (CVSS 4.2) — The 'podman quadlet install --replace' command opens the existing destination file with O_CREATE|O_WRONLY but …
    CVE-2026-19519 (CVSS 4.3) — A flaw was found in claircore's RPM package scanner. Crafted RPM header data in a container layer can cause an…
    CVE-2026-18255 (CVSS 7.2) — A flaw was found in Quay. A user configured in GLOBAL_READONLY_SUPER_USERS is able to view robot account token…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High