CVE-2026-74247

7.1 highEPSS 0.2%

High (7.1) in redhat. EPSS 0.2% chance of exploitation in the next 30 days.

A flaw was found in Red Hat Quay. A user with FEATURE_BUILD_SUPPORT enabled and repository write access can exploit a Server-Side Request Forgery (SSRF) vulnerability within the build API. This allows the user to provide a malicious URL, causing the Quay builder to make requests to internal network addresses. Such an action could lead to the disclosure of sensitive internal information.

Severity

CVSS 3.1

7.1 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 15% of CVEs (scores of 2026-10-31)
CWE: CWE-918
Published: 2026-08-14
Modified: 2026-08-20
Record from: the NVD, synced 2026-10-19

Affected

redhat:openshift_update_service
redhat:quay

References

https://access.redhat.com/security/cve/CVE-2026-74247
https://bugzilla.redhat.com/show_bug.cgi?id=2516144

Check your stack JSON