4.1
Medium
CVE-2026-10052 A flaw was found in the Quay config-tool's LDAP and SMTP validation functions
Description
A flaw was found in the Quay config-tool's LDAP and SMTP validation functions. An attacker with config editor access can exploit these functions, which make outbound connections to user-supplied endpoints without proper IP or host filtering. This allows the attacker to perform internal network reconnaissance from the Quay pod's network position, potentially mapping the internal network infrastructure.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Quay 3 | Versions not published |
References
- access.redhat.com access.redhat.com
- RHBZ#2483157 bugzilla.redhat.com
Timeline
- Published
- Last modified
Other CVEs of Red Hat Quay 3
The 117 CVEs of Red Hat Quay 3 →
CVE-2026-114406
Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns
6.8
Medium
CVE-2026-114236
storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a…
3.3
Low
CVE-2026-85471
A flaw was found in Quay
6.4
Medium
CVE-2026-109194
A flaw was found in Red Hat Quay
6.4
Medium