2 matches found
CVE-2026-18255
A flaw was found in Quay. A user configured in GLOBALREADONLYSUPERUSERS is able to view robot account tokens for repositories they are not a member of, allowing an attacker with read-only superuser privileges to impersonate any robot account...
7.2CVSS5.8AI score0.00654EPSS
SaveExploits0References3
EUVD-2026-50411
A flaw was found in Quay. A user configured in GLOBALREADONLYSUPERUSERS is able to view robot account tokens for repositories they are not a member of, allowing an attacker with read-only superuser privileges to impersonate any robot account...
7.2CVSS5.8AI score0.00654EPSS
SaveExploits0References2
20