CVE-2026-10052 | BDVDB-2026-336507 Detail

Description#

A flaw was found in the Quay config-tool's LDAP and SMTP validation functions. An attacker with config editor access can exploit these functions, which make outbound connections to user-supplied endpoints without proper IP or host filtering. This allows the attacker to perform internal network reconnaissance from the Quay pod's network position, potentially mapping the internal network infrastructure.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-05-29Record published in the CVE List.
2. Version 22026-11-01Most recent update recorded in the CVE List.