https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T13:40:07.498563+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:2293 ALSA-2023:2293 — Moderate: pki-core security, bug fix, and enhancement update 2026-10-06T13:40:07.665395+00:00

Affected: AlmaLinux:9: idm-pki-acme, AlmaLinux:9: idm-pki-base, AlmaLinux:9: idm-pki-ca, AlmaLinux:9: idm-pki-est, AlmaLinux:9: idm-pki-java, AlmaLinux:9: idm-pki-kra, AlmaLinux:9: idm-pki-server, AlmaLinux:9: idm-pki-tools, AlmaLinux:9: python3-idm-pki

The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System.

Security Fix(es):

* pki-core: When using the caServerKeygen_DirUserCert profile, user can get certificates for other UIDs by entering name in Subject field (CVE-2022-2393)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/euvd-2026-12368 EUVD-2026-12368 2026-10-06T13:40:07.665477+00:00 EUVD-2026-12368 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2393 fkie_cve-2022-2393 2026-10-06T13:40:07.665495+00:00

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not be able to decrypt message content.

 https://cve.radiocsirt.org/vuln/ghsa-hjh3-jq28-5qcc GHSA-hjh3-jq28-5qcc 2026-10-06T13:40:07.665519+00:00

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not be able to decrypt message content.

 https://cve.radiocsirt.org/vuln/gsd-2022-2393 gsd-2022-2393 2026-10-06T13:40:07.665535+00:00 gsd-2022-2393 https://cve.radiocsirt.org/vuln/rhsa-2022:7077 RHSA-2022:7077 — Red Hat Security Advisory: Red Hat Certificate System 9.7 CVE bug fix update 2026-10-06T13:40:07.665547+00:00

pki-core: When using the caServerKeygen_DirUserCert profile, user can get certificates for other UIDs by entering name in Subject field

 https://cve.radiocsirt.org/vuln/rhsa-2022:7086 RHSA-2022:7086 — Red Hat Security Advisory: pki-core security update 2026-10-06T13:40:07.665566+00:00

pki-core: When using the caServerKeygen_DirUserCert profile, user can get certificates for other UIDs by entering name in Subject field

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-2393 UBUNTU-CVE-2022-2393 2026-10-06T13:40:07.665582+00:00

Affected: Ubuntu:Pro:16.04:LTS: dogtag-pki, Ubuntu:Pro:18.04:LTS: dogtag-pki, Ubuntu:Pro:20.04:LTS: dogtag-pki, Ubuntu:Pro:22.04:LTS: dogtag-pki

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not be able to decrypt message content.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0706 WID-SEC-W-2022-0706 — Red Hat Enterprise Linux: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-06T13:40:07.665605+00:00

Ein Angreifer aus dem angrenzenden Netzwerk kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Sicherheitsvorkehrungen zu umgehen.