QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2026-2376

Back to search

CVE-2026-2376

Published: Mar 12, 2026

Modified: Mar 12, 2026

PUBLISHED

CVSS v3.1

4.9

MEDIUM

Description

A flaw was found in mirror-registry where an authenticated user can trick the system into accessing unintended internal or restricted systems by providing malicious web addresses. When the application processes these addresses, it automatically follows redirects without verifying the final destination, allowing attackers to route requests to systems they should not have access to.

VendorProductVersions

Red Hat

mirror registry for Red Hat OpenShift

All versions

Red Hat

mirror registry for Red Hat OpenShift 2

All versions

Red Hat

Red Hat Quay 3

All versions

Red Hat

Red Hat Quay 3

All versions

Weaknesses (CWE)

CWE-601

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

References

RHBZ#2439117
issue-tracking
x_refsource_REDHAT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now