{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3ared_hatquay/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:red_hat:quay:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.8,"id":"CVE-2026-123710"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Quay"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Red Hat"],"content_html":"\u003cp\u003eCVE-2026-123710 is a critical vulnerability in Red Hat Quay allowing unauthenticated attackers to hijack the registry's authentication mechanism. By obtaining an anonymous registry token with a user-controlled audience, an attacker can interact with the service key rotation endpoint to install an arbitrary signing key. This key does not expire and is accepted by the registry, allowing the attacker to sign tokens for any repository. This facilitates unauthorized read and write access to private container images and the ability to modify repository tags.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation grants attackers full unauthorized access to private container registries, including the ability to read private images and manipulate repository tags to distribute malicious content. The CVSS 3.1 base score is 9.8.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eIdentify all internet-facing or otherwise exposed Red Hat Quay instances. Monitor the Quay audit logs for unusual registry token requests or modifications to signing key configurations. Immediately apply the security updates provided by Red Hat once available to address this vulnerability.\u003c/p\u003e\n","date_modified":"2026-11-11T16:06:25Z","date_published":"2026-11-11T16:06:25Z","id":"https://feed.craftedsignal.io/briefs/2026-11-red-hat-quay-auth-bypass-cve-2026-123710/","summary":"A critical vulnerability in Red Hat Quay allows an unauthenticated attacker to manipulate the service key rotation endpoint, enabling the installation of a malicious signing key to forge registry tokens and gain unauthorized access to private images.","title":"Red Hat Quay: Unauthorized registry token signing key installation (CVE-2026-123710)","url":"https://feed.craftedsignal.io/briefs/2026-11-red-hat-quay-auth-bypass-cve-2026-123710/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:red_hat:quay:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}