RH
Product
Red Hat Certificate System 9
7
CVEs
0
On KEV
7.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 5Low 1
Watch
Add Red Hat Certificate System 9 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-76561 | 7.2 | Sep 8 | Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint) Affected: All versions, or not specified |
| CVE-2026-11873 | 6.5 | Sep 1 | Pki-core: dogtag-pki: empty request to dogtag /ca/rest/certrequests causes http 500, java exception, and stacktrace disclosure Affected: All versions, or not specified |
| CVE-2026-18047 | 6.5 | Jul 28 | Dogtag-pki: pki-core: redhat-pki: pki: acme admin enable/disable endpoint authentication bypass via trailing slash Affected: All versions, or not specified |
| CVE-2026-18369 | 5.8 | Jul 30 | Dogtag-pki: pki-core: redhat-pki: pki: acme http-01 validation ssrf via ip literal identifiers and unvalidated redirects Affected: All versions, or not specified |
| CVE-2026-53682 | 5.3 | Sep 1 | Pki-core: dogtag-pki: unauthenticated dogtag ca rest api exposes security domain hosts Affected: All versions, or not specified |
| CVE-2026-12353 | 5.3 | Jul 23 | Rhcs: memory leak during https connection leads to denial of service Affected: All versions, or not specified |
| CVE-2026-17039 | 3.1 | Jul 24 | Pki-core: dogtag-pki: redhat-pki: pki-core: ca renewal request processing omits realm authorization check performed by enrollment path Affected: All versions, or not specified |
Showing 7