Red Hat Quay flaw lets attackers forge registry tokens
CVE-2026-123710 (CVSS 9.8) lets an unauthenticated client take over Red Hat Quay's token signing, forge tokens for any repository, and read or overwrite private container images.
CVE-2026-123710 (CVSS 9.8) lets an unauthenticated client take over Red Hat Quay's token signing, forge tokens for any repository, and read or overwrite private container images.