Red Hat Mirror Registry For Red Hat Openshift 2 vulnerabilities

3 CVEs affecting Red Hat Mirror Registry For Red Hat Openshift 2, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-85471, published 2026-10-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-15927, published 2026-07-21. Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days. A flaw was found in Red Hat Quay's repository-level mirror configuration feature. The POST and PUT handlers in endpoints/api/mirror.py accept an external_reference parameter without SSRF validation,…
CVE-2026-27145, published 2026-06-02. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. (*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute repeatedly on the…
CVE-2026-85471, published 2026-10-12. Medium severity, CVSS 6.4. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in Quay. An authenticated repository administrator could bypass the hostname blacklist in webhook notifications, leading to a Server-Side Request Forgery (SSRF) vulnerability. This…