Red Hat Red Hat Certificate System 10
7 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-104988 | | Pki-core: dogtag-pki: redhat-pki: pki: est fullcmc authentication bypass allows certificate mis-issuance with arbitrary subject | HIGH 8.1 | 0.2 % | ||
| CVE-2026-89058 | | Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config | HIGH 7.4 | 0.3 % | ||
| CVE-2026-89059 | | Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos) | HIGH 7.5 | 0.9 % | ||
| CVE-2026-78323 | | Jss: jss: jsstrustmanager does not verify nss trust flags on ca certificates | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-18369 | | Dogtag-pki: pki-core: redhat-pki: pki: acme http-01 validation ssrf via ip literal identifiers and unvalidated redirects | MEDIUM 5.8 | 0.4 % | ||
| CVE-2026-18047 | | Dogtag-pki: pki-core: redhat-pki: pki: acme admin enable/disable endpoint authentication bypass via trailing slash | MEDIUM 6.5 | 0.5 % | ||
| CVE-2026-17039 | | Pki-core: dogtag-pki: redhat-pki: pki-core: ca renewal request processing omits realm authorization check performed by enrollment path | LOW 3.1 | 0.3 % |