Red Hat Red Hat Certificate System 9

• CVE-2026-104988 High 8.1 Pki-core: dogtag-pki: redhat-pki: pki: est fullcmc authentication bypass allows certificate mis-issuance with arbitrary subject 0.2%
• CVE-2026-80110 High 8.1 Pki-core: dogtag pki v2 rest acl filter's reverse-lexicographic tie-break lets a ca agent invoke the admin-only raw profile creation endpoint 0.2%
• CVE-2026-76561 High 7.2 Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint) 0.8%
• CVE-2026-53682 Medium 5.3 Pki-core: dogtag-pki: unauthenticated dogtag ca rest api exposes security domain hosts 0.2%
• CVE-2026-11873 Medium 6.5 Pki-core: dogtag-pki: empty request to dogtag /ca/rest/certrequests causes http 500, java exception, and stacktrace disclosure 0.5%
• CVE-2026-18369 Medium 5.8 Dogtag-pki: pki-core: redhat-pki: pki: acme http-01 validation ssrf via ip literal identifiers and unvalidated redirects 0.4%
• CVE-2026-18047 Medium 6.5 Dogtag-pki: pki-core: redhat-pki: pki: acme admin enable/disable endpoint authentication bypass via trailing slash 0.5%
• CVE-2026-17039 Low 3.1 Pki-core: dogtag-pki: redhat-pki: pki-core: ca renewal request processing omits realm authorization check performed by enrollment path 0.3%
• CVE-2026-12353 Medium 5.3 Rhcs: memory leak during https connection leads to denial of service 0.4%