openshift update service vulnerabilities and fixes

Recent CVEs affecting openshift update service, with upgrade or downgrade steps. 7 tracked.

Also searched as: openshiftupdateservice.

openshift update service has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-08-14. Highest priority: CVE-2026-74243 (score 43/100).

• CVE-2026-74245 MEDIUM 5.9 MITIGATE DOWNGRADE A flaw was found in Red Hat Quay's exported logs feature
• CVE-2026-74244 MEDIUM 5.9 MITIGATE DOWNGRADE A flaw was found in Red Hat Quay's Stripe billing webhook handler
• CVE-2026-74247 MEDIUM 4.2 MITIGATE DOWNGRADE A flaw was found in Red Hat Quay
• CVE-2026-74243 MEDIUM 6.5 MITIGATE DOWNGRADE A flaw was found in Red Hat Quay
• CVE-2026-74240 MEDIUM 5.4 MITIGATE DOWNGRADE A flaw was found in Red Hat Quay's JWT (JSON Web Token) validation for federated robot accounts and single sig
• CVE-2026-74241 MEDIUM 4.8 MITIGATE DOWNGRADE A flaw was found in Red Hat Quay's external Lightweight Directory Access Protocol (LDAP) authentication handli
• CVE-2026-74242 MEDIUM 5.3 MITIGATE DOWNGRADE A flaw was found in Red Hat Quay

FAQ

How do I fix openshift update service vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is openshift update service being exploited right now?

None of the tracked openshift update service CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which openshift update service CVE should I patch first?

CVE-2026-74243 currently ranks highest (43/100): A flaw was found in Red Hat Quay.

RSS feed for openshift update service · ← Back to latest CVEs