CVEvulnerability

CVE-2026-10052

4.1 MEDIUM Published 2026-05-29 Modified 2026-07-21 Official page ↗
Status
Awaiting Analysis
Published
2026-05-29
Last modified
2026-07-21
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N
Weaknesses
CWE-918

Description

A flaw was found in the Quay config-tool's LDAP and SMTP validation functions. An attacker with config editor access can exploit these functions, which make outbound connections to user-supplied endpoints without proper IP or host filtering. This allows the attacker to perform internal network reconnaissance from the Quay pod's network position, potentially mapping the internal network infrastructure.

Related

Weakness · CWE (1)

  • CWE-918 Server-Side Request Forgery weakness

References