CVE-2026-32590 - Mirror-registry: remote code execution using pickle deserialization
CVE ID :CVE-2026-32590
Published : April 8, 2026, 6:25 p.m. | 42 minutes ago
Description :A flaw was found in Red Hat Quay's handling of resumable container image layer uploads. The upload process stores intermediate data in the database using a format that, if tampered with, could allow an attacker to execute arbitrary code on the Quay server.
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Published : April 8, 2026, 6:25 p.m. | 42 minutes ago
Description :A flaw was found in Red Hat Quay's handling of resumable container image layer uploads. The upload process stores intermediate data in the database using a format that, if tampered with, could allow an attacker to execute arbitrary code on the Quay server.
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...