Red Hat OpenShift Update Service vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Latest Red Hat OpenShift Update Service vulnerabilities

CVE-2026-74247 — Quay: ssrf via build archive_url in quay build api (CVSS 7.1)
CVE-2026-74245 — Quay: unauthenticated exported logs download in quay (CVSS 7.5)
CVE-2026-74244 — Quay: stripe webhook accepts forged events without signature verification in quay (CVSS 7.5)
CVE-2026-74243 — Quay: unauthenticated secscan notification endpoint in quay when psk is unset (CVSS 8.2)
CVE-2026-74242 — Quay: repository notification uuid idor in quay api (CVSS 4.4)
CVE-2026-74241 — Quay: ldap referral filter injection in quay external ldap authentication (CVSS 6.5)
CVE-2026-74240 — Quay: jwt claim validation bypasses in quay federated robot and sso authentication (CVSS 5.4)
CVE-2026-16910 — Quay: ssrf in red hat quay notification webhooks (slack/generic) (CVSS 5.5)
CVE-2025-57854 — Osus-operator: privilege escalation via excessive /etc/passwd permissions (CVSS 6.4)