CVE-2026-75939Disclosure

LOWCVSS 7.4 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw was found in openshift/oc-mirror. The tool incorrectly verifies PGP (Pretty Good Privacy) release image signatures by checking for signature errors before the entire signed body is processed, leading to a bypass of the signature verification. A remote attacker, by intercepting or manipulating network traffic to the signature endpoint, could exploit this to craft a PGP message with a valid Red Hat release key ID but a forged signature. This enables the `oc-mirror` tool to accept and mirror a malicious release payload into a disconnected registry, potentially compromising the integrity of software deployments.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-347

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Patch or workaround signal is available
4 mentions across 4 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 3 signals
Disclosure: 3 classified signals
Peaked 3d ago at 1 mentions (2026-09-23); latest day: 1
4 total mentions across 4 days

Deep dive

Activity timeline4 mentions / 4d

Signal classification2 categories

Disclosure

375.0%

Patch

125.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-09-23	1	Disclosure1
2026-09-29	1	Patch1
2026-10-04	1	Disclosure1
2026-10-12	1	Disclosure1

Full discourse4 posts

elhacker.NET@elhackernet45d
Disclosure
Fallo en Red Hat OpenShift permite saltar chequeos PGP y publicar versiones maliciosas Red Hat ha revelado una vulnerabilidad de seguridad importante en la herramienta oc-mirror de OpenShift CVE-2026-75939 https://blog.elhacker.net/2026/09/fallo-en-red-hat-openshift-permite.html
Post summary
Red Hat disclosed CVE-2026-75939 in the oc-mirror tool, indicating it allows bypass of PGP checks and publication of malicious versions, but no patch, exploit, or active exploitation details are provided.
1803064.6K
142.5K followersView on X
Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters26d
Disclosure
CVE-2026-75939 Red Hat oc-mirror PGP signature bypass lets attackers mirror forged release images. CVSS 7.4, no patch yet. Verify your pipelines and watch for updates. https://www.valtersit.com/cve/CVE-2026-75939/ #CVE #infosec #RedHat #RedHat #CVEALERT #CVE #infosec #Linux #XSS #valtersit #snippet #SysAdmin #cybersecurity #devsecops #devops #developer #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #cybersecurityawareness #cybersecuritynews #cybersecuritytips #python #hacker #kali #ubuntu #debian #docker
Post summary
The text announces CVE-2026-75939 as a PGP signature bypass in Red Hat oc-mirror (CVSS 7.4) with no patch available, providing technical vulnerability details and advising users to monitor for updates.
0001043
1.1K followersView on X
DFIR Lab@DFIR_Lab35d
Disclosure
🚨 HIGH SEVERITY: CVE-2026-75939 (CVSS 7.4) Flaw in openshift/oc-mirror bypasses PGP signature verification. Attackers can inject malicious release payloads into disconnected registries via forged signatures. Patch immediately. #CVE #Vulnerability #PatchNow https://t.co/AXuXrLJ2g9
Post summary
The tweet discloses CVE-2026-75939, a high-severity flaw in openshift/oc-mirror that bypasses PGP signature verification to allow malicious payload injection, and urges immediate patching.
0000032
146 followersView on X
iototsecnews@iototsecnews40d
Patch
Red Hat OpenShift の脆弱性 CVE-2026-75939：悪意のペイロード混入の恐れ https://iototsecnews.jp/2026/09/22/red-hat-openshift-flaw-lets-attackers-poison-disconnected-registries-with-malicious-releases/ 米 Red Hat 開発の Red Hat OpenShift を対象とした技術解説記事です。この製品では oc-mirror ツールが PGP 署名の検証処理を誤る問題が発生しています。処理時に不備があるため署名確認の回避を許し、隔離された内部レジストリへ悪意あるデータが混入する恐れがあります。特定された CVE-2026-75939 への対処として、署名取得経路の通信制限／ネットワーク監視の実施／プロキシや DNS 制御の確認／独立した経路でのイメージ検証／ログ保全とマニフェスト照合といった防御策の適用が求められます。 #CVE202675939 #OpenShift #RedHat #Vulnerability
Post summary
The article describes a flaw in Red Hat OpenShift's oc-mirror tool where PGP signature verification can be bypassed, enabling attackers to inject malicious payloads into isolated internal registries, and recommends specific defensive workarounds to mitigate the issue.
00000121
518 followersView on X

Explore more

Back to dashboard

What researchers are saying

CVE-2026-75939

Hugo | DevOps | Cybersecurity 🇱🇻[verified]@HugoValtersDisclosure

The text announces CVE-2026-75939 as a PGP signature bypass in Red Hat oc-mirror (CVSS 7.4) with no patch available, providing technical vulnerability details and advising users to monitor for updates.

DFIR Lab[verified]@DFIR_LabDisclosure

The tweet discloses CVE-2026-75939, a high-severity flaw in openshift/oc-mirror that bypasses PGP signature verification to allow malicious payload injection, and urges immediate patching.

elhacker.NET@elhackernetDisclosure

Red Hat disclosed CVE-2026-75939 in the oc-mirror tool, indicating it allows bypass of PGP checks and publication of malicious versions, but no patch, exploit, or active exploitation details are provided.

iototsecnews@iototsecnewsPatch

The article describes a flaw in Red Hat OpenShift's oc-mirror tool where PGP signature verification can be bypassed, enabling attackers to inject malicious payloads into isolated internal registries, and recommends specific defensive workarounds to mitigate the issue.