CVE-2025-14243EPSS p19.3%

CVE-2025-14243CVE-2025-14243

redhat / mirror_registry_for_red_hat_openshift

Description

A flaw was found in the OpenShift Mirror Registry. This vulnerability allows an unauthenticated, remote attacker to enumerate valid usernames and email addresses via different error messages during authentication failures and account creation.

Scoring

CVSS 5.3 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS0.29% probability of exploitation · percentile 19.3% · 2026-10-05T12:00:23Z
Last modified2026-07-25
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.