THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2026-15927 (MEDIUM 6.8) — A flaw was found in Red Hat Quay's repository-level mirror configuration feature. The POST and PUT handlers in endpoints/api/mirror.py accept an external_reference parameter without SSRF validation, unlike the organization-level mirror handlers which apply validate_external_regis

[NVD] CVE-2026-15927 (MEDIUM 6.8) — A flaw was found in Red Hat Quay's repository-level mirror configuration feature. The POST and PUT handlers in endpoints/api/mirror.py accept an external_reference parameter without SSRF validation, unlike the organization-level mirror handlers which apply validate_external_regis

mednvdPublished 2026-07-21

CVE-2026-15927 CVSS: 6.8 MEDIUM Published: 2026-07-21T06:16:28.603

A flaw was found in Red Hat Quay's repository-level mirror configuration feature. The POST and PUT handlers in endpoints/api/mirror.py accept an external_reference parameter without SSRF validation, unlike the organization-level mirror handlers which apply validate_external_registry_url(). A repository administrator can supply a c

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-15927