CVE-2026-17039
Pki-core: dogtag-pki: redhat-pki: pki-core: ca renewal request processing omits realm authorization check performed by enrollment path
CVSS Score
3.1
EPSS Score
0.0%
EPSS Percentile
0th
A flaw was found in pki-core. The certificate authority (CA) renewal request path does not perform the realm-based authorization check that the enrollment path performs, allowing an authenticated user entitled to one realm to cause a certificate belonging to a different realm to be renewed without that realm's authorization.
| CWE | CWE-863 |
| Vendor | red hat |
| Product | red hat certificate system 10 |
| Published | Jul 24, 2026 |
Stay Ahead of the Next One
Get instant alerts for red hat red hat certificate system 10
Be the first to know when new low vulnerabilities affecting red hat red hat certificate system 10 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N Attack Vector
Network
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
None
Affected Versions
Red Hat / Red Hat Certificate System 10
All versions affected Red Hat / Red Hat Certificate System 11
All versions affected Red Hat / Red Hat Certificate System 9
All versions affected Red Hat / Red Hat Enterprise Linux 10
All versions affected Red Hat / Red Hat Enterprise Linux 6
All versions affected Red Hat / Red Hat Enterprise Linux 7
All versions affected Red Hat / Red Hat Enterprise Linux 8
All versions affected Red Hat / Red Hat Enterprise Linux 9
All versions affected References
access.redhat.com: https://access.redhat.com/security/cve/CVE-2021-20179 access.redhat.com: https://access.redhat.com/security/cve/CVE-2026-17039 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2506720 github.com: https://github.com/dogtagpki/pki/blob/master/base/ca/database/ds/acl.ldif github.com: https://github.com/dogtagpki/pki/blob/master/base/ca/src/main/java/com/netscape/cms/servlet/cert/EnrollmentProcessor.java github.com: https://github.com/dogtagpki/pki/blob/master/base/ca/src/main/java/com/netscape/cms/servlet/cert/RenewalProcessor.java github.com: https://github.com/dogtagpki/pki/blob/master/base/ca/src/main/java/org/dogtagpki/server/ca/rest/v2/CertServlet.java github.com: https://github.com/dogtagpki/pki/commit/e2de26769761af04b9c56071bd1a1926903c49b6
Credits
Red Hat would like to thank Arpit Jain (Github: arpitjain099) for reporting this issue.