Product
high
threat
Path Traversal Vulnerability in oc-mirror
1 TTP 1 CVEA path traversal and arbitrary file write vulnerability in Red Hat's oc-mirror utility allows attackers to write files outside the intended destination directory during catalog image extraction.
exploited
oc-mirror
vulnerability
path-traversal
container-security
supply-chain
1t
1c
updated
high
advisory
CVE-2026-75939 - Signature Verification Bypass in Red Hat oc-mirror
1 TTP 1 CVEA logic flaw in the oc-mirror tool allows remote attackers to bypass PGP signature verification, enabling the injection of malicious release payloads into disconnected registries.
oc-mirror
supply-chain-security
cloud
red-hat
openshift
1t
1c