Unauthenticated Red Hat Quay flaw lets attackers replace signing keys
CVE-2026-123710 scores 9.8; anonymous tokens can install a non-expiring key when anonymous access is on, and no fix is named.
Stories per day · 30 days
Relatedcontainer-registry4red-hat4supply-chain2jwt1openshift1signing-key1signing-keys1token-signing1
1 stories, newest first · one card per story
Stories tagged #quay