CVE-2025-14243Medium· 5.3▾ SunlitA flaw was found in the OpenShift Mirror Registry. This vulnerability allows an unauthenticated, remote attacker to enumerate valid usernames and email addresses via different error messages during authentication failures and account cre…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.2 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 26.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
A flaw was found in the OpenShift Mirror Registry. This vulnerability allows an unauthenticated, remote attacker to enumerate valid usernames and email addresses via different error messages during authentication failures and account creation.
mirror_registry_for_red_hat_openshiftmirror_registry_for_red_hat_openshift = 2.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-32591Medium· 5.2A flaw was found in Red Hat Quay's Proxy Cache configuration feature
CVE-2026-32590High· 7.1A flaw was found in Red Hat Quay's handling of resumable container image layer uploads
CVE-2026-32589High· 7.4A flaw was found in Red Hat Quay's container image upload process
CVE-2026-2377Medium· 6.5A flaw was found in Red Hat Quay and mirror registry for Red Hat OpenShift
CVE-2025-8852Medium· 4.3A vulnerability was identified in WuKongOpenSource WukongCRM 11.0
CVE-2024-23689High· 8.8Exposure of sensitive information in exceptions in ClichHouse's clickhouse-r2dbc, com.clickhouse:clickhouse-jdbc, and com.clickhouse:clickhouse-client versions less than 0.4.6 allows unauthorized users to gain access to client certificat…