Red Hat Red Hat Certificate System 11

• CVE-2026-104988 High 8.1 Pki-core: dogtag-pki: redhat-pki: pki: est fullcmc authentication bypass allows certificate mis-issuance with arbitrary subject 0.2%
• CVE-2026-89058 High 7.4 Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config 0.5%
• CVE-2026-89059 High 7.5 Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos) 1.5%
• CVE-2026-78323 Medium 6.5 Jss: jss: jsstrustmanager does not verify nss trust flags on ca certificates 0.2%
• CVE-2026-18369 Medium 5.8 Dogtag-pki: pki-core: redhat-pki: pki: acme http-01 validation ssrf via ip literal identifiers and unvalidated redirects 0.4%
• CVE-2026-18047 Medium 6.5 Dogtag-pki: pki-core: redhat-pki: pki: acme admin enable/disable endpoint authentication bypass via trailing slash 0.5%
• CVE-2026-17039 Low 3.1 Pki-core: dogtag-pki: redhat-pki: pki-core: ca renewal request processing omits realm authorization check performed by enrollment path 0.3%