https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T06:53:25.713746+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-74782 EUVD-2026-74782 2026-10-06T06:53:25.809359+00:00 EUVD-2026-74782 https://cve.radiocsirt.org/vuln/fkie_cve-2017-7537 fkie_cve-2017-7537 2026-10-06T06:53:25.809403+00:00

It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package before 10.6.4. An attacker could potentially use this flaw to bypass the regular authentication process and trick the CA server into issuing certificates.

 https://cve.radiocsirt.org/vuln/ghsa-x46g-cxp8-8wjm GHSA-x46g-cxp8-8wjm 2026-10-06T06:53:25.809448+00:00

It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package before 10.6.4. An attacker could potentially use this flaw to bypass the regular authentication process and trick the CA server into issuing certificates.

 https://cve.radiocsirt.org/vuln/gsd-2017-7537 gsd-2017-7537 2026-10-06T06:53:25.809478+00:00 gsd-2017-7537 https://cve.radiocsirt.org/vuln/rhsa-2017:2335 RHSA-2017:2335 — Red Hat Security Advisory: pki-core security update 2026-10-06T06:53:25.809496+00:00

pki-core: mock CMC authentication plugin with hardcoded secret enabled by default

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-7537 UBUNTU-CVE-2017-7537 2026-10-06T06:53:25.809526+00:00

Affected: Ubuntu:Pro:16.04:LTS: dogtag-pki

It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package before 10.6.4. An attacker could potentially use this flaw to bypass the regular authentication process and trick the CA server into issuing certificates.