AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Red HatCVE-2026-76561

Red Hat Dogtag PKI: code execution

Red Hat

CVE-2026-76561 · Published Sep 8, 2026 · updated Nov 5, 2026

High7.2
No fix yet
Red Hat advisory

A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component. The certificate profile import functionality does not fully validate uploaded profile content beyond the profile ID. An authenticated user with CA Administrator privileges can exploit Dogtag's ExternalProcessConstraint mechanism to execute arbitrary commands with attacker-controlled environment variables, achieving code execution as the pkiuser account.

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-78

More Red Hat advisories

All Red Hat
Low 3.3Sep 8Red Hat DPDK lib/vhost. Missing length validation: out-of-bounds readCVE-2026-86564no fix yetMedium 6.1Sep 8Red Hat gdk-pixbuf. This vulnerability: out-of-bounds readCVE-2026-18090no fix yetHigh 8.2Sep 8Red Hat build of Apache Camel - HawtIO 4: improper privilege managementCVE-2026-77968no fix yetCritical 9.9Sep 8Red Hat build of Apache Camel - HawtIO 4: improper certificate validationCVE-2026-78234no fix yetHigh 8.5Sep 8Red Hat libxml2 with Python bindings enabled: denial of serviceCVE-2026-74860no fix yetMedium 6.8Sep 8Red Hat Enterprise Linux: path traversalCVE-2026-74859no fix yet