Red Hat Bug Fix Advisory: Red Hat Quay v3.13.8 bug fix release
Affects Red HatSource GCVE Database
Public exploit available (Exploit-DB).
Data as of 30 Oct 2026, 21:51 UTC
Rated by Threat Radar · No CVSS score from NVD or the CNA
- EPSS
- 6.4% chance of exploitation in 30 days – higher than 93% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Exploitation evidence
t = 0 is the CVE’s publication on cve.org
Disclosed: evidence found.
CVE published 27 Aug 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: evidence found.
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
Timeline
CVE published
on cve.org
, t = 0
First Exploit-DB entry (opens in a new tab)
Redis 8.0.2 - RCE
, 161 days after disclosure
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 30 Oct 2026.
What to do
AI-suggested
Upgrade to Red Hat Quay version 3.13.8 or later, where the vulnerability has been fixed. Since this is a bug fix release, applying this update is the recommended remediation. No additional mitigation steps are indicated.
Description
CVE-2025-32023 is a high severity vulnerability in Red Hat Quay, addressed in the bug fix release version 3.13.8. The vulnerability is classified under CWE-787, indicating a potential out-of-bounds write issue. Public exploit code is available, but there is no indication of exploitation in the wild. No specific affected versions are detailed in the available information.