Red Hat OpenShift Update Service — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in Red Hat OpenShift Update Service, with AI-generated Chinese analysis, references, and POCs.

Vendor: Red Hat

CVE ID	Title	CVSS	Severity	Published
CVE-2026-74247	Quay: ssrf via build archive_url in quay build api CWE-918	4.2	Medium	2026-08-14
CVE-2026-74245	Quay: unauthenticated exported logs download in quay CWE-306	5.9	Medium	2026-08-14
CVE-2026-74244	Quay: stripe webhook accepts forged events without signature verification in quay CWE-347	5.9	Medium	2026-08-14
CVE-2026-74243	Quay: unauthenticated secscan notification endpoint in quay when psk is unset CWE-306	6.5	Medium	2026-08-14
CVE-2026-74242	Quay: repository notification uuid idor in quay api CWE-639	5.3	Medium	2026-08-14
CVE-2026-74241	Quay: ldap referral filter injection in quay external ldap authentication CWE-90	4.8	Medium	2026-08-14
CVE-2026-74240	Quay: jwt claim validation bypasses in quay federated robot and sso authentication CWE-287	5.4	Medium	2026-08-14
CVE-2026-16910	Quay: ssrf in red hat quay notification webhooks (slack/generic) CWE-918	5.5	Medium	2026-07-24
CVE-2025-57854	Osus-operator: privilege escalation via excessive /etc/passwd permissions CWE-276	6.4	Medium	2026-04-08

All 9 known CVE vulnerabilities affecting Red Hat OpenShift Update Service with full Chinese analysis, references, and POCs where available.