What’s Vulnerable › Vulnerabilities

CVE-2026-115221: Ipa: freeipa: freeipa uses subject cn as proof of certificate ownership

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-22 · updated 2026-10-26
• Weakness: CWE-863

Description

A flaw was found in FreeIPA. An improper authorization check allows an authenticated host to retrieve and revoke digital certificates assigned to other users or services. This issue occurs because FreeIPA verifies ownership solely by matching the host name to the certificate's subject Common Name (CN), without confirming actual ownership in the directory service. Consequently, an enrolled host can disrupt services by revoking certificates belonging to other entities.

Affected products

• Red Hat Enterprise Linux 10: all versions
• Red Hat Enterprise Linux 8: all versions
• Red Hat Enterprise Linux 9: all versions

References

• https://access.redhat.com/security/cve/CVE-2026-115221
• https://bugzilla.redhat.com/show_bug.cgi?id=2559043

Get alerted when CVE-2026-115221 or the next vulnerability affects your stack