CVE-2026-16910 | A flaw was found in Red Hat Quay's notification webhook feat… | CVSS 5.5 MEDIUM

Description

A flaw was found in Red Hat Quay's notification webhook feature. The Slack and generic webhook notification handlers accept user-supplied URLs without SSRF validation, allowing a repository administrator to make the Quay worker issue POST requests to internal network addresses or cloud infrastructure endpoints that should not be reachable from the application.

Metadata

CVE ID: CVE-2026-16910
State: PUBLISHED
Assigner: redhat
Reserved: 2026-07-24 06:26 UTC
Published: 2026-07-24 06:36 UTC
Last updated: 2026-07-24 10:55 UTC
Primary CWE: CWE-918
Server-Side Request Forgery (SSRF)
Vendor / Product: Red Hat / Red Hat OpenShift Update Service
Sources: cve.org · NVD

Severity & Metrics

5.5 MEDIUM CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N

SSVC — CISA Coordinator

Exploitation: none
Automatable: no
Tech. Impact: partial

Affected products (3)

Vendor	Product	Platform	Versions
Red Hat	Red Hat OpenShift Update Service	—	—
Red Hat	Red Hat Quay 3	—	—
Red Hat	Red Hat Quay 3	—	—

Weakness (CWE)

CWE	Source	Description
CWE-918	cna	Server-Side Request Forgery (SSRF)

CVSS scores (1)

Score	Severity	Version	Source	Vector
5.5	MEDIUM	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N

References (2)