CVE-2026-114406

MEDIUM 6.8

Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns

CVSS Score

6.8

EPSS Score

0.0%

EPSS Percentile

0th

The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue certificates for arbitrary host names signed by the weak intermediate CA certificates, which would be considered trusted by a TLS/SSL client using system CA store and cause such clients to connect to malicious sites. Due to inability to only distrust specific intermediate certificates in all clients using the system CA store, root CA certificates of authorities that signed weak intermediate CA certificates are being removed.

CWE	CWE-295
Vendor	red hat
Product	assisted installer for red hat openshift container platform 2
Published	Oct 21, 2026

Stay Ahead of the Next One

Get instant alerts for red hat assisted installer for red hat openshift container platform 2

Be the first to know when new medium vulnerabilities affecting red hat assisted installer for red hat openshift container platform 2 are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Affected Versions

Red Hat / Assisted Installer for Red Hat OpenShift Container Platform 2

All versions affected

Red Hat / cert-manager Operator for Red Hat OpenShift

All versions affected

Red Hat / Confidential Compute Attestation

All versions affected

Red Hat / Kernel Module Management Operator for Red Hat Openshift

All versions affected

Red Hat / Kube Descheduler Operator

All versions affected

Red Hat / Logging Subsystem for Red Hat OpenShift

All versions affected

Red Hat / Logical Volume Manager Storage

All versions affected

Red Hat / Logical Volume Manager Storage

All versions affected

Red Hat / Logical Volume Manager Storage

All versions affected

Red Hat / Migration Toolkit for Applications 8

All versions affected

Red Hat / Migration Toolkit for Containers

All versions affected

Red Hat / Migration Toolkit for Virtualization

All versions affected

Red Hat / Multicluster Engine for Kubernetes

All versions affected

Red Hat / Network Observability Operator

All versions affected

Red Hat / OpenShift Serverless

All versions affected

Red Hat / OpenShift Serverless

All versions affected

Red Hat / OpenShift Service Mesh 3

All versions affected

Red Hat / OpenShift Service Mesh 3

All versions affected

Red Hat / OpenShift Service Mesh 3

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2

All versions affected

Red Hat / Red Hat Advanced Cluster Security 4

All versions affected

Red Hat / Red Hat Advanced Cluster Security 4

All versions affected

Red Hat / Red Hat Connectivity Link 1

All versions affected

Red Hat / Red Hat Connectivity Link 1

All versions affected

Red Hat / Red Hat Enterprise Linux 10

All versions affected

Red Hat / Red Hat Enterprise Linux 6

All versions affected

Red Hat / Red Hat Enterprise Linux 7

All versions affected

Red Hat / Red Hat Enterprise Linux 8

All versions affected

Red Hat / Red Hat Enterprise Linux 9

All versions affected

Red Hat / Red Hat Hardened Images

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4

All versions affected

Red Hat / Red Hat OpenShift distributed tracing 3

All versions affected

Red Hat / Red Hat OpenShift for Windows Containers

All versions affected

Red Hat / Red Hat OpenShift for Windows Containers

All versions affected

Red Hat / Red Hat OpenShift Virtualization 4

All versions affected

Red Hat / Red Hat OpenShift Virtualization 5

All versions affected

Red Hat / Red Hat Quay 3

All versions affected

Red Hat / Red Hat Quay 3

All versions affected

Red Hat / Red Hat Satellite 6

All versions affected

References

NVD ↗ CVE.org ↗ EPSS Data ↗

access.redhat.com: https://access.redhat.com/security/cve/CVE-2026-114406 access.redhat.com: https://access.redhat.com/security/vulnerabilities/RHSB-2026-012 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2556046