CVE-2026-74243
highpriority · track · 33OT risk · elevatedEPSS 0.005 · 40 %ileEUUSEPSS · scored 2026-10-27
A flaw was found in Red Hat Quay. When the SECURITY_SCANNER_V4_PSK (pre-shared key) is not set, a remote unauthenticated attacker can send POST requests to the security scanner notification endpoint. This allows the attacker to flood the notification queue and inject path traversal characters into Clair API URL paths. The primary consequence is worker resource exhaustion and blind path manipulation on the configured Clair host, potentially leading to a denial of service.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.5–8.2
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (2)
Products and version ranges known to be affected.
- redhat openshift update serviceall versionsnvdUScpe:2.3:a:redhat:openshift_update_service:*:*:*:*:*:*:*:*
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (6)
External citations — patches, advisories, analysis.
- https://access.redhat.com/security/cve/CVE-2026-74243cnnvd
- https://bugzilla.redhat.com/show_bug.cgi?id=2516142cnnvd
- https://access.redhat.com/security/cve/CVE-2026-74243enisa_euvd
- https://bugzilla.redhat.com/show_bug.cgi?id=2516142enisa_euvd
- https://access.redhat.com/security/cve/CVE-2026-74243Vendor Advisorynvd
- https://bugzilla.redhat.com/show_bug.cgi?id=2516142Issue TrackingVendor Advisorynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan