Security Advisory

CVE-2026-2377

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-04-08 16:26:07

Last updated 2026-05-28 02:37:16

Assigner redhat

State PUBLISHED

Description

A flaw was found in mirror-registry. Authenticated users can exploit the log export feature by providing a specially crafted web address (URL). This allows the applications backend to make arbitrary requests to internal network resources, a vulnerability known as Server-Side Request Forgery (SSRF). This could lead to unauthorized access to sensitive information or other internal systems.

← Browse all CVEs View on cve.org ↗