https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T15:32:39.691756+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:4165 ALSA-2024:4165 — Important: pki-core security update 2026-10-07T15:32:39.706672+00:00

Affected: AlmaLinux:9: idm-pki-acme, AlmaLinux:9: idm-pki-base, AlmaLinux:9: idm-pki-ca, AlmaLinux:9: idm-pki-est, AlmaLinux:9: idm-pki-java, AlmaLinux:9: idm-pki-kra, AlmaLinux:9: idm-pki-server, AlmaLinux:9: idm-pki-tools, AlmaLinux:9: python3-idm-pki

The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System.

Security Fix(es):

* dogtag ca: token authentication bypass vulnerability (CVE-2023-4727)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-00342 bdu:2025-00342 2026-10-07T15:32:39.706739+00:00 bdu:2025-00342 https://cve.radiocsirt.org/vuln/euvd-2026-330505 EUVD-2026-330505 2026-10-07T15:32:39.706756+00:00 EUVD-2026-330505 https://cve.radiocsirt.org/vuln/fkie_cve-2023-4727 fkie_cve-2023-4727 2026-10-07T15:32:39.706768+00:00

A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=*, an attacker can authenticate with an existing session saved in the LDAP directory server, which may lead to escalation of privilege.

 https://cve.radiocsirt.org/vuln/ghsa-rvm7-rc5g-c98q GHSA-rvm7-rc5g-c98q 2026-10-07T15:32:39.706789+00:00

A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=*, an attacker can authenticate with an existing session saved in the LDAP directory server, which may lead to escalation of privilege.

 https://cve.radiocsirt.org/vuln/gsd-2023-4727 gsd-2023-4727 2026-10-07T15:32:39.706804+00:00 gsd-2023-4727 https://cve.radiocsirt.org/vuln/oesa-2025-1238 OESA-2025-1238 — pki-core security update 2026-10-07T15:32:39.706815+00:00

Affected: openEuler:24.03-LTS: pki-core

Dogtag PKI is a designed enterprise software system manage enterprise Public Key Infrastructure deployments. Security Fix(es):

A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=*, an attacker can authenticate with an existing session saved in the LDAP directory server, which may lead to escalation of privilege.(CVE-2023-4727)

 https://cve.radiocsirt.org/vuln/rhsa-2024:4051 RHSA-2024:4051 — Red Hat Security Advisory: pki-core security update 2026-10-07T15:32:39.706836+00:00

ca: token authentication bypass vulnerability

 https://cve.radiocsirt.org/vuln/rhsa-2024:4165 RHSA-2024:4165 — Red Hat Security Advisory: pki-core security update 2026-10-07T15:32:39.706852+00:00

ca: token authentication bypass vulnerability

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-4727 UBUNTU-CVE-2023-4727 2026-10-07T15:32:39.706865+00:00

Affected: Ubuntu:Pro:16.04:LTS: dogtag-pki, Ubuntu:Pro:18.04:LTS: dogtag-pki, Ubuntu:Pro:20.04:LTS: dogtag-pki, Ubuntu:Pro:22.04:LTS: dogtag-pki

A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=*, an attacker can authenticate with an existing session saved in the LDAP directory server, which may lead to escalation of privilege.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1434 WID-SEC-W-2024-1434 — Red Hat Enterprise Linux (pki and Libreswan): Mehrere Schwachstellen 2026-10-07T15:32:39.706886+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Sicherheitsmaßnahmen zu umgehen oder einen Denial-of-Service-Zustand zu verursachen.