CVE-2026-18255Published
Quay: quay: global read-only superuser can view robot account tokens
cve-program · CVE-2026-18255
Publishedquay/quay-rhel8
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat Quay 3.10",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "quay/quay-rhel8",
"defaultStatus": "affected",
"versions": [
{
"version": "1788561841",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:quay:3.10::el8"
]
}quay/quay-rhel8
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat Quay 3.12",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "quay/quay-rhel8",
"defaultStatus": "affected",
"versions": [
{
"version": "1788594376",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:quay:3.12::el8"
]
}quay/quay-rhel8
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat Quay 3.14",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "quay/quay-rhel8",
"defaultStatus": "affected",
"versions": [
{
"version": "1788593843",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:quay:3.14::el8"
]
}quay/quay-rhel8
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat Quay 3.15",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "quay/quay-rhel8",
"defaultStatus": "affected",
"versions": [
{
"version": "1788191755",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:quay:3.15::el8"
]
}quay/quay-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat Quay 3.16",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "quay/quay-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1789563753",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:quay:3.16::el9"
]
}quay/quay-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat Quay 3.17",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "quay/quay-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1790690298",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:quay:3.17::el9"
]
}quay/quay-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat Quay 3.18",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "quay/quay-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1791265590",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:quay:3.18::el9"
]
}quay/quay-rhel8
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat Quay 3.9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "quay/quay-rhel8",
"defaultStatus": "affected",
"versions": [
{
"version": "1788595574",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:quay:3.9::el8"
]
}Original source record · Cite this exact observation · Complete original publisher JSON