Red Hat Certificate System 11 vulnerabilities

3 known vulnerabilities in Red Hat Certificate System 11 from Red Hat. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Red Hat Certificate System 10: Authentication Bypass by Spoofing

  CVE-2026-104988Oct 2, 2026Red Hat

  A flaw was found in Dogtag PKI (pki-core). The CMCAuthForEST authentication plugin fails open when an EST fullcmc enrollment request is submitted via BasicAuth without an end-user TLS client certificate. The SSL_CLIENT_CERT session attribute retains the EST su

• 7.5 High severity

  Red Hat Build of Apache Camel 3.33.4.redhat: Improper Handling of Highly Compressed Data (Data Amplification)

  CVE-2026-89059Sep 18, 2026Red HatEPSS 1.53%

  A flaw was found in RESTEasy's IIOImageProvider, which decodes attacker-supplied image request bodies without enforcing any limit on the declared image dimensions or pixel count. A remote, unauthenticated attacker can send a small crafted image declaring enorm

• 7.4 High severity

  Red Hat Build of Apache Camel 3.33.4.redhat: Origin Validation Error

  CVE-2026-89058Sep 18, 2026Red Hat

  A flaw was found in RESTEasy's CorsFilter, which, when configured to allow all origins ("*"), reflects the request's Origin header back in the Access-Control-Allow-Origin response together with Access-Control-Allow-Credentials: true. This permissive cross-orig