Threats Tagged 'cve-2026-102295'
View all threats tagged with 'cve-2026-102295'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-102295'
Click on any threat for detailed analysis and mitigation recommendations
0 A cross-site scripting (XSS) vulnerability exists in the OAuth callback handler of Quay. This flaw allows a remote attacker to execute arbitrary JavaScript code within the context of a logged-in user's browser session by tricking the user into visiting a maliciously crafted link. Exploitation could lead to session compromise, unauthorized actions, or access to sensitive registry information. The vulnerability has a medium severity rating with a CVSS score of 5.4. No affected versions or patch information are currently provided. Join the discussion | GCVE Database | 10/05/2026, 17:02:45 UTC Added: 10/05/2026, 19:38:25 UTC |
0 A flaw was found in Quay. A cross-site scripting (XSS) vulnerability in the OAuth callback handler allows a remote attacker to execute arbitrary JavaScript code within a user's browser session. By tricking a logged-in user into visiting a specially crafted link, an attacker can exploit improper input sanitization to run client-side scripts in the application context. Successful exploitation could allow the attacker to compromise the user's session, access sensitive registry information, or perform unauthorized actions on their behalf. Join the discussion | CVE Database V5 | 10/05/2026, 17:02:45 UTC Added: 10/05/2026, 17:34:08 UTC |
Showing 1 to 2 of 2 results