PT-2026-44761 · Red Hat · Quay

Osidb Bzimport · Published 2026-05-29 · Updated 2026-05-29 · CVE-2026-10052

Positive Technologies (AI Summary)

CVSS v3.1

4.1

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Quay (affected versions not specified)

Description A flaw exists in the LDAP and SMTP validation functions of the Quay config-tool. An attacker with config editor access can exploit these functions, which establish outbound connections to user-supplied endpoints without proper IP or host filtering. This allows the attacker to perform internal network reconnaissance from the Quay pod's network position to potentially map the internal network infrastructure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-10052

Affected Products

Quay

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-10052 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2483157 · Note
• https://twitter.com/VulmonFeeds/status/2060325467408810412 · Twitter Post
• https://t.me/cveNotify/165160 · Telegram Post
• https://t.me/CVEtracker/55229 · Telegram Post
• https://t.me/cveNotify/165181 · Telegram Post
• https://access.redhat.com/security/cve/CVE-2026-10052 · Note