CVE-2026-96577Published
Oc-mirror__release-4.21: embedded local cache registry listens on all interfaces without authentication, with delete enabled
cve-program · CVE-2026-96577
Publishedopenshift4/oc-mirror-plugin-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "openshift4/oc-mirror-plugin-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1790828598",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
]
}openshift4/oc-mirror-plugin-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.19",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "openshift4/oc-mirror-plugin-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1790778095",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:openshift:4.19::el9"
]
}openshift4/oc-mirror-plugin-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.20",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "openshift4/oc-mirror-plugin-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1790782357",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
]
}openshift4/oc-mirror-plugin-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.21",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "openshift4/oc-mirror-plugin-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1790777129",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
]
}openshift4/oc-mirror-plugin-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.22",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "openshift4/oc-mirror-plugin-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1790775357",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:openshift:4.22::el9"
]
}assisted/agent-preinstall-image-builder-rhel9
https://access.redhat.com/downloads/content/package-browser/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "assisted/agent-preinstall-image-builder-rhel9",
"defaultStatus": "unknown",
"cpes": [
"cpe:/a:redhat:assisted_installer:2"
]
}Original source record · Cite this exact observation · Complete original publisher JSON