PatchRadar

← Browse

CVE-2026-32589

Medium

Elevated severity or exploit probability.

CVSS base
7.4 HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
EPSS — probability of exploitation (30 days)
0.2%
15.8th percentile
CISA KEV
Not listed
Weakness / dates
CWE-639
Published 2026-04-08 · modified 2026-09-10

CVSS breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

Attack VectorNNetwork
Attack ComplexityLLow
Privileges RequiredLLow
User InteractionNNone
ScopeCChanged
ConfidentialityLLow
IntegrityLLow
AvailabilityLLow

Timeline

Description

A flaw was found in Red Hat Quay's container image upload process. An authenticated user with push access to any repository on the registry can interfere with image uploads in progress by other users, including those in repositories they do not have access to. This could allow the attacker to read, modify, or cancel another user's in-progress image upload.

Affected

redhat

References

Official: NVD · CVE.org