CVE-2026-15927 | Red Hat mirror registry for OpenShift/Quay Mirror configuration endpoints/api/mirror.py validate_external_registry_url external_reference server-side request forgery

July 21, 2026 Yanac

A vulnerability was found in Red Hat mirror registry for OpenShift and Quay. It has been rated as problematic. This impacts the function validate_external_registry_url of the file endpoints/api/mirror.py of the component Mirror configuration. The manipulation of the argument external_reference leads to server-side request forgery.

This vulnerability is uniquely identified as CVE-2026-15927. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More