Skip to contentRed Hat Certificate System 9 vulnerabilities
- red hat certificate system 10, certificate system 11, certificate system 9 +5 more +7 morePki-core: dogtag-pki: redhat-pki: pki: est fullcmc authentication bypass allows certificate mis-issuance with arbitrary subjectCVE-2026-1049888.1 High
- red hat certificate system 9, enterprise linux 10, enterprise linux 10.0 extended update support +5 more +7 morePki-core: dogtag pki v2 rest acl filter's reverse-lexicographic tie-break lets a ca agent invoke the admin-only raw profile creation endpointCVE-2026-801108.1 High
- red hat certificate system 9, enterprise linux 10, enterprise linux 10.0 extended update support +13 more +15 morePki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint)CVE-2026-76561Fix available7.2 High
- red hat certificate system 9, enterprise linux 10, enterprise linux 6 +3 more +5 morePki-core: dogtag-pki: unauthenticated dogtag ca rest api exposes security domain hostsCVE-2026-536825.3 Medium
- red hat certificate system 9, enterprise linux 10, enterprise linux 6 +3 more +5 morePki-core: dogtag-pki: empty request to dogtag /ca/rest/certrequests causes http 500, java exception, and stacktrace disclosureCVE-2026-118736.5 Medium
- red hat certificate system 10, certificate system 10.4 eus for rhel-8, certificate system 11 +6 more +8 moreDogtag-pki: pki-core: redhat-pki: pki: acme http-01 validation ssrf via ip literal identifiers and unvalidated redirectsCVE-2026-18369Fix available5.8 Medium
- red hat certificate system 10, certificate system 11, certificate system 9 +5 more +7 moreDogtag-pki: pki-core: redhat-pki: pki: acme admin enable/disable endpoint authentication bypass via trailing slashCVE-2026-180476.5 Medium
- red hat certificate system 10, certificate system 11, certificate system 9 +5 more +7 morePki-core: dogtag-pki: redhat-pki: pki-core: ca renewal request processing omits realm authorization check performed by enrollment pathCVE-2026-170393.1 Low
- red hat certificate system 9, enterprise linux 10, enterprise linux 8 +1 more +3 moreRhcs: memory leak during https connection leads to denial of serviceCVE-2026-123535.3 Medium