{"id":"EM-20261111-1357","url":"https://cyber.eventmonitor.net/incident/EM-20261111-1357/critical-quay-vulnerability-cve-2026-123710/","type":"cve","title":"Critical quay Vulnerability (CVE-2026-123710)","subtitle":"CVE-2026-123710","subject":"CVE-2026-123710","status":"Developing","severity":"critical","affected":[],"headline":null,"born":"2026-11-11T15:17:18.340Z","firstSignal":"2026-11-11T14:00:00.000Z","lastSignal":"2026-11-11T15:17:18.340Z","updated":"2026-11-12T00:31:06.720Z","revision":1,"life":[{"status":"Born","at":"2026-11-11T15:17:18.340Z","why":"second independent source: C6 NVD CVE API 2.0"},{"status":"Developing","at":"2026-11-11T15:17:18.340Z","why":"signals keep joining"}],"changeLog":[{"at":"2026-11-11T14:00:00.000Z","what":"First signal: C41 Red Hat Security Data"},{"at":"2026-11-11T15:17:18.340Z","what":"Born: second source, C6 NVD CVE API 2.0. Page EM-20261111-1357 created."}],"stages":[{"name":"Disclosed","at":"2026-11-11T15:17:18.340Z","detail":"C6 NVD published"},{"name":"Scored","at":"2026-11-11T15:17:18.340Z","detail":"CVSS 9.8"},{"name":"Exploited","at":null,"detail":"No exploitation reported"},{"name":"Advisories","at":null,"detail":"None yet"},{"name":"Vendor Response","at":"2026-11-11T14:00:00.000Z","detail":"C41 published"},{"name":"Resolved","at":null,"detail":"After 14 quiet days"}],"signals":[{"at":"2026-11-11T14:00:00.000Z","source":"C41","sourceName":"Red Hat Security Data","role":"Vendor","severity":4,"title":"Red Hat: CVE-2026-123710 (critical)","text":"quay: Red Hat Quay: unauthenticated registry signing-key takeover via service key rotation","url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-123710.json"},{"at":"2026-11-11T15:17:18.340Z","source":"C6","sourceName":"NVD CVE API 2.0","role":"Database","severity":4,"title":"CVE-2026-123710 (CVSS 9.8)","text":"A flaw was found in Red Hat Quay. An unauthenticated client can obtain an anonymous registry token with an audience it controls, present that token to the service key rotation endpoint, and install its own approved signing key with no expiry. Registry tokens signed with that key are accepted for any repository, allowing read and write access to private images and replacement of repository tags.","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-123710"}],"crowd":[],"reference":{"nvd":{"published":"2026-11-11T15:17:18.340","score":9.8,"severity":"CRITICAL","desc":"A flaw was found in Red Hat Quay. An unauthenticated client can obtain an anonymous registry token with an audience it controls, present that token to the service key rotation endpoint, and install its own approved signing key with no expiry. Registry tokens signed with that key are accepted for…","product":"","seen":1794419709077},"kev":null,"epss":null,"p0":false},"mergedInto":null,"publisher":"Event Monitor Cyber"}