CPE
A critical vulnerability in Red Hat Quay allows an unauthenticated attacker to manipulate the service key rotation endpoint, enabling the installation of a malicious signing key to forge registry tokens and gain unauthorized access to private images.