VulnSocial

CVE-2026-6848Disclosure(redhat / quay)

LOWCVSS 8.1 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw was found in Red Hat Quay. When Red Hat Quay requests password re-verification for sensitive operations, such as token generation or robot account creation, the re-authentication prompt can be bypassed. This allows a user with a timed-out session, or an attacker with access to an idle authenticated browser session, to perform privileged actions without providing valid credentials. The vulnerability enables unauthorized execution of sensitive operations despite the user interface displaying an error for invalid credentials.

redhat CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-613

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • quay

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Affected systems

Vendors
redhat
Products
quay

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-04-22: 2Technical Details · 2026-04-22: 104-22
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-6848 A flaw was found in Red Hat Quay. When Red Hat Quay requests password re-verification for sensitive operations, such as token generation or robot account creation, the … https://www.cve.org/CVERecord?id=CVE-2026-6848 ----- Traducción: CVE-2026-6848 Se … http://infoflow.cloud`

    Post summary

    A brief disclosure of CVE-2026-6848, a flaw in Red Hat Quay, is announced with a reference to the CVE record but no detailed technical information or exploit details.

    0000030
    72 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-6848 A flaw was found in Red Hat Quay. When Red Hat Quay requests password re-verification for sensitive operations, such as token generation or robot account creation, the … https://www.cve.org/CVERecord?id=CVE-2026-6848

    Post summary

    The text announces a vulnerability (CVE‑2026‑6848) in Red Hat Quay involving password re-verification for sensitive actions, without providing proof of concept, exploit code, or a patch.

    00000185
    57.2K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appredhatquay3.0.0--

Explore more

Back to dashboardredhat CVEsquay vulnerabilities