Vulnerability Details CVE-2026-74247
A flaw was found in Red Hat Quay. A user with FEATURE_BUILD_SUPPORT enabled and repository write access can exploit a Server-Side Request Forgery (SSRF) vulnerability within the build API. This allows the user to provide a malicious URL, causing the Quay builder to make requests to internal network addresses. Such an action could lead to the disclosure of sensitive internal information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 3.2%
CVSS Severity
CVSS v3 Score 4.2
References
Products affected by CVE-2026-74247
-
cpe:2.3:a:redhat:openshift_update_service:-
-
cpe:2.3:a:redhat:quay:3.0.0