Q
Quay
Security Risk Profile
32
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 6 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 11, 2025 to present
6
Total CVEs
2
Critical+High
0
Exploited
2
Unpatched
Threat Assessment
Avg CVSS
4.8
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
32/100
low
📈 1 in Last 30 Days
Severity Distribution
Critical
0High
2Medium
2Low
2Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
SSRF
2
Most Affected Products
1. Quay Quay config-tool2
2. redhat Mirror Registry For Red Hat Openshift2
3. Quay quay1
4. Quay quay/config-tool1
5. Quay mirror-registry1
Recent Vulnerabilities
See more →CVE-2026-18255
CVSS 7.2high
Quay: quay: global read-only superuser can view robot account tokens
Jul 29, 2026🔧 No Patch
CVE-2026-10078
CVSS 2.7low
Quay/config-tool: quay/config-tool: gitlab oauth client_secret exposed in url querystring
May 29, 2026🔧 No Patch
REDHAT-BUG-2483168
CVSS 1.0low
May 29, 2026🔧 No Patch
CVE-2026-10052
CVSS 4.1medium
Quay/config-tool: quay/config-tool: ssrf via unfiltered ldap and smtp config validation endpoints
May 29, 2026🔧 No Patch
CVE-2026-2377
CVSS 6.5medium
Mirror-registry: quay: quay: server-side request forgery via log export functionality
Feb 11, 2026🔧 No Patch
REDHAT-BUG-2359143
CVSS 7.0high
Apr 11, 2025🔧 No Patch
Monitor Quay in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.