Red Hat Mirror Registry For Red Hat Openshift vulnerabilities

5 CVEs affecting Red Hat Mirror Registry For Red Hat Openshift, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-32591, published 2026-04-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-32590, published 2026-04-08. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. A flaw was found in Red Hat Quay's handling of resumable container image layer uploads. The upload process stores intermediate data in the database using a format that, if tampered with, could allow…
CVE-2026-32591, published 2026-04-08. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw was found in Red Hat Quay's Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the…
CVE-2026-32589, published 2026-04-08. High severity, CVSS 7.4. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw was found in Red Hat Quay's container image upload process. An authenticated user with push access to any repository on the registry can interfere with image uploads in progress by other…
CVE-2026-2377, published 2026-04-08. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw was found in Red Hat Quay and mirror registry for Red Hat OpenShift. The log export feature in these products allows an authenticated user to specify an arbitrary callback URL. A backend…
CVE-2025-14243, published 2026-04-08. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw was found in the OpenShift Mirror Registry. This vulnerability allows an unauthenticated, remote attacker to enumerate valid usernames and email addresses via different error messages during…