Red Hat Bug Fix Advisory: Red Hat Quay v3.10.11 bug fix release
Affects Red HatSource GCVE Database
Not known to be exploited.
Data as of 30 Oct 2026, 22:08 UTC
Rated by Threat Radar · No CVSS score from NVD or the CNA
- EPSS
- 0.8% chance of exploitation in 30 days – higher than 58% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Exploitation evidence
Disclosed: evidence found.
CVE published 16 Jun 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 30 Oct 2026.
What to do
AI-suggested
A bug fix release, Red Hat Quay 3.10.11, is available and should be applied to remediate the vulnerabilities including CVE-2025-21605. Before applying this update, ensure that all previously released errata relevant to your system have been applied. Follow Red Hat's official guidance on applying updates as detailed in their documentation. No additional mitigation steps are indicated in the advisory.
Description
Red Hat Quay version 3.10.11 includes a bug fix release addressing multiple vulnerabilities, including CVE-2025-21605. The update is rated with an Important security impact by Red Hat Product Security. The advisory recommends applying this update after ensuring all previous errata are applied. No specific technical details or CVSS scores are provided for CVE-2025-21605 in the advisory.