What’s Vulnerable › Vulnerabilities

CVE-2025-14243: Mirror-registry: openshift mirror registry: user enumeration via authentication error messages

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-04-08 · updated 2026-07-25
• Weakness: CWE-209

Description

A flaw was found in the OpenShift Mirror Registry. This vulnerability allows an unauthenticated, remote attacker to enumerate valid usernames and email addresses via different error messages during authentication failures and account creation.

Affected products

• RedHat Mirror Registry For Red Hat Openshift: 2.0

References

• https://access.redhat.com/security/cve/CVE-2025-14243
• https://bugzilla.redhat.com/show_bug.cgi?id=2419829

Get alerted when CVE-2025-14243 or the next vulnerability affects your stack