https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T18:53:41.931453+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-3528 CVE-2025-3528 — Mirror-registry: local privilege escalation due to incorrect permissions in mirror-registry 2026-10-08T18:53:41.932617+00:00

Affected: mirror-registry, Red Hat MIRROR-REGISTRY-2.0-RHEL-8, Red Hat mirror registry for Red Hat OpenShift

A flaw was found in the Mirror Registry. The quay-app container shipped as part of the Mirror Registry for OpenShift has write access to the `/etc/passwd`. This flaw allows a malicious actor with access to the container to modify the passwd file and elevate their privileges to the root user within that pod.