CVE-2026-74245

Katalog CVE

CVSS 7.5 · High EPSS 0,42%

Kerentanan Missing Authentication for Critical Function pada redhat openshift update service, redhat quay. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A flaw was found in Red Hat Quay's exported logs feature. An unauthenticated attacker with a valid file ID could download exported action logs without proper authorization. While file IDs are complex, they can be intercepted from plaintext email or webhook callbacks. This vulnerability leads to information disclosure, potentially exposing sensitive data such as usernames, email addresses, IP addresses, and action-specific metadata.

Rincian

Terbit di NVD

14 Agustus 2026

Terakhir diubah

20 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-306: Missing Authentication for Critical Function

EPSS (30 hari)

0,42% peluang dieksploitasi; lebih tinggi dari 34,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/security/cve/CVE-2026-74245 advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=2516145 issue tracking · advisory vendor