https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T00:55:16.916425+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:73765 ALSA-2026:73765 — Important: dogtag-pki security update 2026-10-03T00:55:16.922552+00:00

Affected: AlmaLinux:10: idm-pki-acme, AlmaLinux:10: idm-pki-base, AlmaLinux:10: idm-pki-ca, AlmaLinux:10: idm-pki-java, AlmaLinux:10: idm-pki-kra, AlmaLinux:10: idm-pki-server, AlmaLinux:10: idm-pki-tools, AlmaLinux:10: python3-idm-pki

IdM PKI is an enterprise software system designed to manage enterprise Public Key Infrastructure deployments. IdM PKI consists of the following components:

* Certificate Authority (CA) * Key Recovery Authority (KRA) * Online Certificate Status Protocol (OCSP) Manager * Token Key Service (TKS) * Token Processing Service (TPS) * Automatic Certificate Management Environment (ACME) Responder * Enrollment over Secure Transport (EST) Responder

Security Fix(es):

* pki-core: Dogtag/PKI: certprofile-import allows code execution via unsanitized profile content (ExternalProcessConstraint) (CVE-2026-76561) * pki-core: Dogtag PKI v2 REST ACL filter's reverse-lexicographic tie-break lets a CA Agent invoke the admin-only raw profile creation endpoint (CVE-2026-80110)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/euvd-2026-379225 EUVD-2026-379225 2026-10-03T00:55:16.922617+00:00 EUVD-2026-379225 https://cve.radiocsirt.org/vuln/fkie_cve-2026-76561 fkie_cve-2026-76561 2026-10-03T00:55:16.922634+00:00

A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component. The certificate profile import functionality does not fully validate uploaded profile content beyond the profile ID. An authenticated user with CA Administrator privileges can exploit Dogtag's ExternalProcessConstraint mechanism to execute arbitrary commands with attacker-controlled environment variables, achieving code execution as the pkiuser account.

 https://cve.radiocsirt.org/vuln/ghsa-pp8g-7wxg-9php GHSA-pp8g-7wxg-9php 2026-10-03T00:55:16.922658+00:00

A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component. The certificate profile import functionality does not fully validate uploaded profile content beyond the profile ID. An authenticated user with CA Administrator privileges can exploit Dogtag's ExternalProcessConstraint mechanism to execute arbitrary commands with attacker-controlled environment variables, achieving code execution as the pkiuser account.

 https://cve.radiocsirt.org/vuln/rhsa-2026:73765 RHSA-2026:73765 — security update for dogtag-pki 2026-10-03T00:55:16.922674+00:00

security update for dogtag-pki

 https://cve.radiocsirt.org/vuln/rlsa-2026:73765 RLSA-2026:73765 — Important: dogtag-pki security update 2026-10-03T00:55:16.922698+00:00

Affected: Rocky Linux:10: dogtag-pki

IdM PKI is an enterprise software system designed to manage enterprise Public Key Infrastructure deployments. IdM PKI consists of the following components: * Certificate Authority (CA) * Key Recovery Authority (KRA) * Online Certificate Status Protocol (OCSP) Manager * Token Key Service (TKS) * Token Processing Service (TPS) * Automatic Certificate Management Environment (ACME) Responder * Enrollment over Secure Transport (EST) Responder

Security Fix(es):

* pki-core: Dogtag/PKI: certprofile-import allows code execution via unsanitized profile content (ExternalProcessConstraint) (CVE-2026-76561)

* pki-core: Dogtag PKI v2 REST ACL filter's reverse-lexicographic tie-break lets a CA Agent invoke the admin-only raw profile creation endpoint (CVE-2026-80110)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-76561 UBUNTU-CVE-2026-76561 2026-10-03T00:55:16.922725+00:00

Affected: Ubuntu:Pro:16.04:LTS: dogtag-pki, Ubuntu:Pro:18.04:LTS: dogtag-pki, Ubuntu:Pro:20.04:LTS: dogtag-pki, Ubuntu:Pro:22.04:LTS: dogtag-pki

A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component. The certificate profile import functionality does not fully validate uploaded profile content beyond the profile ID. An authenticated user with CA Administrator privileges can exploit Dogtag's ExternalProcessConstraint mechanism to execute arbitrary commands with attacker-controlled environment variables, achieving code execution as the pkiuser account.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3662 WID-SEC-W-2026-3662 — Red Hat Enterprise Linux (pki-core und dogtag-pki): Mehrere Schwachstellen 2026-10-03T00:55:16.922748+00:00

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux (pki-core und dogtag-pki) ausnutzen, um beliebigen Programmcode auszuführen, und um Daten zu manipulieren.