Skip to main content
Press slash or control plus K to focus the search. Use the arrow keys to navigate results and press enter to open a threat.
Reconnecting to live updates…
EPSS 1.1%top 37%

Red Hat Security Advisory: Red Hat Quay 3.15.4

0
High
Published: 04/03/2026 (04/03/2026, 22:07:28 UTC)
Source: GCVE Database
Vendor/Project: Red Hat Product Security
Product: Red Hat

Description

Quay 3.15.4

Affected software

Affected versions
Red HatRed Hat QuayRed Hat Quay 3.15amd64registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:25b0676b9bb2e564fc64b43567ca4e3acda0a9d6ea405f2f8134b0e36b27b701_amd64

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 07/30/2026, 07:45:40 UTC

Technical Analysis

Red Hat Quay 3.15.4 is a security advisory issued by Red Hat Product Security that addresses multiple vulnerabilities (including CVE-2024-34156 and 25 additional CVEs) affecting Red Hat Quay. The advisory references a broad range of CWEs such as improper access control, race conditions, and memory corruption issues. The update is intended to fix these security issues through bug fixes. The vendor advisory does not specify detailed technical descriptions of each vulnerability or exploitation methods. No known exploits in the wild have been reported. The advisory recommends applying the update after ensuring all prior errata are applied.

Potential Impact

The vulnerabilities addressed in Red Hat Quay 3.15.4 are rated as high severity, indicating significant security risks if left unpatched. The issues span multiple weakness types, potentially impacting access control, memory safety, and other security properties of Red Hat Quay. Exploitation could lead to unauthorized actions or system compromise. However, no known active exploitation has been reported to date.

Mitigation Recommendations

Red Hat has released version 3.15.4 of Red Hat Quay containing fixes for the identified vulnerabilities. Users should apply this update after confirming that all previously released errata relevant to their system have been installed. Detailed update instructions are available from Red Hat's official documentation. There is no indication that additional mitigation steps are required beyond applying the update.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Gcve Source
db.gcve.eu
Csaf Category
csaf_security_advisory
Csaf Version
2.0
Publisher
Red Hat Product Security
Advisory Id
RHSA-2026:6568
Cve Count
26
Additional Cves
["CVE-2024-45337","CVE-2024-45338","CVE-2025-61726","CVE-2025-61728","CVE-2025-61729","CVE-2025-68121","CVE-2025-68158","CVE-2025-69873","CVE-2026-4598","CVE-2026-4599","CVE-2026-4600","CVE-2026-4601","CVE-2026-4602","CVE-2026-25639","CVE-2026-25990","CVE-2026-26007","CVE-2026-26996","CVE-2026-27628","CVE-2026-27904","CVE-2026-28498","CVE-2026-28802","CVE-2026-29063","CVE-2026-29074","CVE-2026-30922","CVE-2026-32597"]
Cvss Version
null

Threat ID: 6a160964e29bf47b506290bb

Added to database: 05/26/2026, 20:58:12 UTC

Last enriched: 07/30/2026, 07:45:40 UTC

Last updated: 07/31/2026, 22:05:36 UTC

Views: 130

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses