Vulnerabilities of Red Hat Red Hat Certificate System 11

Is your version affected?

CVE	Summary	Score	Published
CVE-2026-104988	Pki-core: dogtag-pki: redhat-pki: pki: est fullcmc authentication bypass allows certificate mis-issuance with arbitrary subject	8.1 High	Oct 2, 2026
CVE-2026-89058	Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config	7.4 High	Sep 18, 2026
CVE-2026-89059	Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos)	7.5 High	Sep 18, 2026
CVE-2026-78323	Jss: jss: jsstrustmanager does not verify nss trust flags on ca certificates	6.5 Medium	Aug 24, 2026
CVE-2026-18369	Dogtag-pki: pki-core: redhat-pki: pki: acme http-01 validation ssrf via ip literal identifiers and unvalidated redirects	5.8 Medium	Jul 30, 2026
CVE-2026-18047	Dogtag-pki: pki-core: redhat-pki: pki: acme admin enable/disable endpoint authentication bypass via trailing slash	6.5 Medium	Jul 28, 2026
CVE-2026-17039	A flaw was found in pki-core	3.1 Low	Jul 24, 2026