Vulnérabilités connues pour Red Hat Certificate System 9

Votre version est-elle touchée ?

CVE	Résumé	Score	Publiée
CVE-2026-104988	Pki-core: dogtag-pki: redhat-pki: pki: est fullcmc authentication bypass allows certificate mis-issuance with arbitrary subject	8.1 Élevée	2 oct. 2026
CVE-2026-80110	Pki-core: dogtag pki v2 rest acl filter's reverse-lexicographic tie-break lets a ca agent invoke the admin-only raw profile creation endpoint	8.1 Élevée	21 sept. 2026
CVE-2026-76561	Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint)	7.2 Élevée	8 sept. 2026
CVE-2026-53682	Pki-core: dogtag-pki: unauthenticated dogtag ca rest api exposes security domain hosts	5.3 Moyenne	1 sept. 2026
CVE-2026-11873	Pki-core: dogtag-pki: empty request to dogtag /ca/rest/certrequests causes http 500, java exception, and stacktrace disclosure	6.5 Moyenne	1 sept. 2026
CVE-2026-18369	Dogtag-pki: pki-core: redhat-pki: pki: acme http-01 validation ssrf via ip literal identifiers and unvalidated redirects	5.8 Moyenne	30 juil. 2026
CVE-2026-18047	Dogtag-pki: pki-core: redhat-pki: pki: acme admin enable/disable endpoint authentication bypass via trailing slash	6.5 Moyenne	28 juil. 2026
CVE-2026-17039	Pki-core: dogtag-pki: redhat-pki: pki-core: ca renewal request processing omits realm authorization check performed by enrollment path	3.1 Faible	24 juil. 2026
CVE-2026-12353	Rhcs: memory leak during https connection leads to denial of service	5.3 Moyenne	23 juil. 2026