248 matches found
CVE-2026-109194
A flaw was found in Red Hat Quay. The build trigger management application programming interface API fails to verify whether a requested trigger belongs to the specified repository. An authenticated user with administrative access to any repository can view, modify, or permanently delete build...
CVE-2026-109194
A flaw was found in Red Hat Quay. The build trigger management application programming interface API fails to verify whether a requested trigger belongs to the specified repository. An authenticated user with administrative access to any repository can view, modify, or permanently delete build...
EUVD-2026-97498
A flaw was found in Red Hat Quay. The build trigger management application programming interface API fails to verify whether a requested trigger belongs to the specified repository. An authenticated user with administrative access to any repository can view, modify, or permanently delete build...
CVE-2026-109194 Quay: build trigger uuid idor in quay api
A flaw was found in Red Hat Quay. The build trigger management application programming interface API fails to verify whether a requested trigger belongs to the specified repository. An authenticated user with administrative access to any repository can view, modify, or permanently delete build...
CVE-2026-109194
A flaw in Red Hat Quay allows an authenticated user with administrative access to any repository to perform an Insecure Direct Object Reference (IDOR) attack. The build trigger management API fails to verify if a requested trigger belongs to the specified repository. By knowing the universally un...
Important: Red Hat Security Advisory: Red Hat Quay
A new version of Red Hat Quay is now available. Red Hat Quay...
CVE-2026-109194: Authorization Bypass Through User-Controlled Key
A flaw was found in Red Hat Quay. The build trigger management application programming interface API fails to verify whether a requested trigger belongs to the specified repository. An authenticated user with administrative access to any repository can view, modify, or permanently delete build...
PT-2026-110637
🚨 CVE-2026-109194 A flaw was found in Red Hat Quay. The build trigger management application programming interface API fails to verify whether a requested trigger belongs to the specified repository. An authenticated user with administrative access to any repository can view, modify, or permanent...
Important: Red Hat Security Advisory: Red Hat Quay 3.12.23
Red Hat Quay 3.12.23 is now available with bug fixes. Quay 3.12.23...
Important: Red Hat Security Advisory: Red Hat Quay 3.10.27
Red Hat Quay 3.10.27 is now available with bug fixes. Quay 3.10.27...
Important: Red Hat Security Advisory: Red Hat Quay 3.9.27
Red Hat Quay 3.9.27 is now available with bug fixes. Quay 3.9.27...
Important: Red Hat Security Advisory: Red Hat Quay 3.17.5
Red Hat Quay 3.17.5 is now available with bug fixes. Quay 3.17.5...
CVE-2026-74246
A flaw was found in Red Hat Quay's custom build trigger handler. This vulnerability allows a user with organization repository administrative privileges and the FEATUREBUILDSUPPORT enabled to read arbitrary files on the build worker. This is possible due to insufficient validation of the build...
Important: Red Hat Security Advisory: Red Hat Quay 3.14.9
Red Hat Quay 3.14.9 is now available with bug fixes. Quay 3.14.9...
Important: Red Hat Security Advisory: Red Hat Quay 3.16.6
Red Hat Quay 3.16.6 is now available with bug fixes. Quay 3.16.6...
Important: Red Hat Security Advisory: Red Hat Quay 3.12.22
Red Hat Quay 3.12.22 is now available with bug fixes. Quay 3.12.22...
Important: Red Hat Security Advisory: Red Hat Quay 3.10.26
Red Hat Quay 3.10.26 is now available with bug fixes. Quay 3.10.26...
Important: Red Hat Security Advisory: Red Hat Quay 3.9.26
Red Hat Quay 3.9.26 is now available with bug fixes. Quay 3.9.26...
Red Hat Quay Proxy Cache Privilege Escalation
The vulnerability of the Proxy Cache component of the Red Hat Quay software platform is related to the improper assignment of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...