CVE-2026-74242— Quay: repository notification uuid idor in quay api
Possible ATT&CK Techniques 1AI
T1530 · Data from Cloud StorageGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-74242
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Quay: repository notification uuid idor in quay api
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw was found in Red Hat Quay. An administrator of any repository, by knowing or guessing a target notification's Universally Unique Identifier (UUID), can read the notification configuration, including sensitive details like webhook URLs, Slack tokens, and email addresses. This vulnerability also allows them to trigger test notifications for another repository. This could lead to unauthorized information disclosure and potential misuse of notification services.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
通过用户控制密钥绕过授权机制
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Red Hat | Red Hat OpenShift Update Service | - | cpe:/a:redhat:openshift_update_service:5 | |
| Red Hat | Red Hat Quay 3 | - | cpe:/a:redhat:quay:3 | |
| Red Hat | Red Hat Quay 3 | - | cpe:/a:redhat:quay:3 |
II. Public POCs for CVE-2026-74242
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-74242
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-74242 (1)
- 🔗 2516140 – (CVE-2026-74242) CVE-2026-74242 quay: Repository notification UUID IDOR in Quay API Read full article issue-trackingx_refsource_REDHAT
Other References for CVE-2026-74242 (1)
Same Patch Batch · Red Hat · 2026-08-14 · 11 CVEs total
| CVE-2026-74243 | 6.5 MEDIUM | Quay: unauthenticated secscan notification endpoint in quay when psk is unset |
| CVE-2026-58224 | 6.5 MEDIUM | Samba: ctdb fails to do integrity checking of received packets |
| CVE-2026-74245 | 5.9 MEDIUM | Quay: unauthenticated exported logs download in quay |
| CVE-2026-74244 | 5.9 MEDIUM | Quay: stripe webhook accepts forged events without signature verification in quay |
| CVE-2026-19617 | 5.5 MEDIUM | Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser |
| CVE-2026-74240 | 5.4 MEDIUM | Quay: jwt claim validation bypasses in quay federated robot and sso authentication |
| CVE-2026-19879 | 5.3 MEDIUM | Io.undertow/undertow: undertow: http response header integrity issue due to character trun |
| CVE-2026-74241 | 4.8 MEDIUM | Quay: ldap referral filter injection in quay external ldap authentication |
| CVE-2026-13002 | 4.4 MEDIUM | Dnsmasq: infinite loop dos in dnssec nsec/nsec3 type bitmap parsing |
| CVE-2026-74247 | 4.2 MEDIUM | Quay: ssrf via build archive_url in quay build api |
IV. Related Vulnerabilities
Same product: Red Hat OpenShift Update Service
- CVE-2026-74247
Quay: ssrf via build archive_url in quay build api - CVE-2026-74245
Quay: unauthenticated exported logs download in quay - CVE-2026-74244
Quay: stripe webhook accepts forged events without signature - CVE-2026-74243
Quay: unauthenticated secscan notification endpoint in quay - CVE-2026-74241
Quay: ldap referral filter injection in quay external ldap a
Same vendor: Red Hat
- CVE-2026-74247
Quay: ssrf via build archive_url in quay build api - CVE-2026-74245
Quay: unauthenticated exported logs download in quay - CVE-2026-74243
Quay: unauthenticated secscan notification endpoint in quay - CVE-2026-74244
Quay: stripe webhook accepts forged events without signature - CVE-2026-74241
Quay: ldap referral filter injection in quay external ldap a
Same weakness: CWE-639
- CVE-2026-16142
TrueBooker <= 1.2.6 - Unauthenticated Account Takeover via I - CVE-2026-19838
Webkul Bagisto Backend Reporting Endpoint sales authorizatio - CVE-2026-19836
Webkul Bagisto Backend Customer Detail Feature view authoriz - CVE-2026-19834
Webkul Bagisto Admin Customer Impersonation Feature login-as - CVE-2026-19870
IDOR in Prospero Flow CRM allows cross-tenant payroll disclo
V. Comments for CVE-2026-74242
No comments yet