Vulnerabilities of Red Hat Red Hat Certificate System 9

Is your version affected?

CVE	Summary	Score	Published
CVE-2026-104988	Pki-core: dogtag-pki: redhat-pki: pki: est fullcmc authentication bypass allows certificate mis-issuance with arbitrary subject	8.1 High	Oct 2, 2026
CVE-2026-80110	Pki-core: dogtag pki v2 rest acl filter's reverse-lexicographic tie-break lets a ca agent invoke the admin-only raw profile creation endpoint	8.1 High	Sep 21, 2026
CVE-2026-76561	Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint)	7.2 High	Sep 8, 2026
CVE-2026-53682	Pki-core: dogtag-pki: unauthenticated dogtag ca rest api exposes security domain hosts	5.3 Medium	Sep 1, 2026
CVE-2026-11873	Pki-core: dogtag-pki: empty request to dogtag /ca/rest/certrequests causes http 500, java exception, and stacktrace disclosure	6.5 Medium	Sep 1, 2026
CVE-2026-18369	Dogtag-pki: pki-core: redhat-pki: pki: acme http-01 validation ssrf via ip literal identifiers and unvalidated redirects	5.8 Medium	Jul 30, 2026
CVE-2026-18047	Dogtag-pki: pki-core: redhat-pki: pki: acme admin enable/disable endpoint authentication bypass via trailing slash	6.5 Medium	Jul 28, 2026
CVE-2026-17039	A flaw was found in pki-core	3.1 Low	Jul 24, 2026
CVE-2026-12353	Rhcs: memory leak during https connection leads to denial of service	5.3 Medium	Jul 23, 2026