Red Hat Security Advisory

RHSA-2026:67110

Red Hat Certificate System 10.4.4 security and bug fix update for RHEL 8

Released 2026-09-14 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Certificate System 10.4 EUS for RHEL 8 idm-console-framework-1.3.0-1.module+el8pki+14677+1ef79a68.noarch::redhat-pki:10, idm-console-framework-1.3.0-1.module+el8pki+14677+1ef79a68.src::redhat-pki:10, jss-4.9.11-1.module+el8pki+24697+be195eea.src::redhat-pki:10 +26

Fixes 1 record

TI-2026-15104 CVE-2026-18369 · GHSA-g3fm-cr7x-pwvj

Dogtag-pki: pki-core: redhat-pki: pki: acme http-01 validation ssrf via ip literal identifiers and unvalidated redirects

LOW 32

A flaw was found in Dogtag PKI's ACME responder where the HTTP-01 challenge validator accepts IP address literals as dns identifiers and follows HTTP redirects without validating that the target is a public address.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00384 Published 2026-07-30 Partial fix · 8060020260814202723.07fb4edf CWE-918