Red Hat Red Hat Certificate System 9
9 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-104988 | | Pki-core: dogtag-pki: redhat-pki: pki: est fullcmc authentication bypass allows certificate mis-issuance with arbitrary subject | HIGH 8.1 | 0.2 % | ||
| CVE-2026-80110 | | Pki-core: dogtag pki v2 rest acl filter's reverse-lexicographic tie-break lets a ca agent invoke the admin-only raw profile creation endp… | HIGH 8.1 | 0.2 % | ||
| CVE-2026-76561 | | Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint) | HIGH 7.2 | 0.7 % | ||
| CVE-2026-53682 | | Pki-core: dogtag-pki: unauthenticated dogtag ca rest api exposes security domain hosts | MEDIUM 5.3 | 0.2 % | ||
| CVE-2026-11873 | | Pki-core: dogtag-pki: empty request to dogtag /ca/rest/certrequests causes http 500, java exception, and stacktrace disclosure | MEDIUM 6.5 | 0.5 % | ||
| CVE-2026-18369 | | Dogtag-pki: pki-core: redhat-pki: pki: acme http-01 validation ssrf via ip literal identifiers and unvalidated redirects | MEDIUM 5.8 | 0.4 % | ||
| CVE-2026-18047 | | Dogtag-pki: pki-core: redhat-pki: pki: acme admin enable/disable endpoint authentication bypass via trailing slash | MEDIUM 6.5 | 0.5 % | ||
| CVE-2026-17039 | | Pki-core: dogtag-pki: redhat-pki: pki-core: ca renewal request processing omits realm authorization check performed by enrollment path | LOW 3.1 | 0.3 % | ||
| CVE-2026-12353 | | Rhcs: memory leak during https connection leads to denial of service | MEDIUM 5.3 | 0.4 % |