CVE-2026-17039CWE-863

Pki-core: dogtag-pki: redhat-pki: pki-core: ca renewal request processing omits realm authorization check performed by enrollment path

Low · published July 24, 2026

CVSS v3.1
3.1
EPSS
0%
Percentile
16.7
In the wild
Unconfirmed
What it is

A flaw was found in pki-core. The certificate authority (CA) renewal request path does not perform the realm-based authorization check that the enrollment path performs, allowing an authenticated user entitled to one realm to cause a certificate belonging to a different realm to be renewed without that realm's authorization.

The record
Technical detail
CVSS v3.1
3.1 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00259 · 16.7th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2026-07-24T15:12Z
EPSS history
Timeline
  • 24 JUL 15:12Z
    Pki-core: dogtag-pki: redhat-pki: pki-core: ca renewal request processing omits realm authorization check performed by enrollment path
    cvelistv5