What’s Vulnerable › Products

Red Hat Certificate System 9 vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your Red Hat Certificate System 9 version is affected

Latest Red Hat Certificate System 9 vulnerabilities

• CVE-2026-76561 — Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint) (CVSS 7.2)
• CVE-2026-53682 — Pki-core: dogtag-pki: unauthenticated dogtag ca rest api exposes security domain hosts (CVSS 5.3)
• CVE-2026-11873 — Pki-core: dogtag-pki: empty request to dogtag /ca/rest/certrequests causes http 500, java exception, and stacktrace disclosure (CVSS 6.5)
• CVE-2026-18369 — Dogtag-pki: pki-core: redhat-pki: pki: acme http-01 validation ssrf via ip literal identifiers and unvalidated redirects (CVSS 5.8)
• CVE-2026-17039 — Pki-core: dogtag-pki: redhat-pki: pki-core: ca renewal request processing omits realm authorization check performed by enrollment path (CVSS 3.1)
• CVE-2026-12353 — Rhcs: memory leak during https connection leads to denial of service (CVSS 5.3)