What’s Vulnerable › Products

Red Hat Certificate System 11 vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your Red Hat Certificate System 11 version is affected

Latest Red Hat Certificate System 11 vulnerabilities

• CVE-2026-104988 — Pki-core: dogtag-pki: redhat-pki: pki: est fullcmc authentication bypass allows certificate mis-issuance with arbitrary subject (CVSS 8.1)
• CVE-2026-89058 — Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config (CVSS 7.4)
• CVE-2026-89059 — Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos) (CVSS 7.5)
• CVE-2026-78323 — Jss: jss: jsstrustmanager does not verify nss trust flags on ca certificates (CVSS 6.5)
• CVE-2026-18369 — Dogtag-pki: pki-core: redhat-pki: pki: acme http-01 validation ssrf via ip literal identifiers and unvalidated redirects (CVSS 5.8)
• CVE-2026-18047 — Dogtag-pki: pki-core: redhat-pki: pki: acme admin enable/disable endpoint authentication bypass via trailing slash (CVSS 6.5)
• CVE-2026-17039 — Pki-core: dogtag-pki: redhat-pki: pki-core: ca renewal request processing omits realm authorization check performed by enrollment path (CVSS 3.1)