redhat-pki:10 vulnerabilities

CVEs whose affected-version data names the redhat-pki:10 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-18369Medium· 5.8

1mo ago

Dogtag-pki: pki-core: redhat-pki: pki: acme http-01 validation ssrf via ip literal identifiers and unvalidated redirects

A flaw was found in Dogtag PKI's ACME responder where the HTTP-01 challenge validator accepts IP address literals as dns identifiers and follows HTTP redirects without validating that the target is a public address. An unauthenticated AC…

▾ SunlitRed Hat · redhat-pki:10EPSS 0.22%via CVEORG