CVE-2026-16910CWE-918

Quay: ssrf in red hat quay notification webhooks (slack/generic)

Medium · published July 24, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
20.2
In the wild
Unconfirmed
What it is

A flaw was found in Red Hat Quay's notification webhook feature. The Slack and generic webhook notification handlers accept user-supplied URLs without SSRF validation, allowing a repository administrator to make the Quay worker issue POST requests to internal network addresses or cloud infrastructure endpoints that should not be reachable from the application.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00288 · 20.2th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2026-07-24T06:36Z
EPSS history
Timeline
  • 24 JUL 06:36Z
    Quay: ssrf in red hat quay notification webhooks (slack/generic)
    cvelistv5