Critical Security Vulnerability in Dogtag PKI Packages - Red Hat Advisory RHSA-2026:73765
Summary
RHSA-2026:73765: Red Hat Security Advisory: dogtag-pki security update. Affects dogtag-pki versions < 0:11.9.0-5.el10_2. Fixed in 0:11.9.0-5.el10_2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Dogtag PKI is an open-source Public Key Infrastructure (PKI) solution that provides a comprehensive set of services for managing digital certificates and keys. It is widely used in enterprise environments to secure communications and manage identity. The recent security advisory from Red Hat highlights vulnerabilities in multiple Dogtag PKI packages, which could potentially compromise the integrity and confidentiality of sensitive data.
Vulnerability Detail
The vulnerabilities identified in the Dogtag PKI packages, tracked as CVE-2026-76561 and CVE-2026-80110, stem from inadequate validation of input data, which could allow an attacker to exploit the system. This could lead to unauthorized access to sensitive information or even complete system compromise. The vulnerabilities have a CVSS score of 8.1, indicating a high severity level, and they affect various components of the Dogtag PKI suite, including the core package and its related modules.
How To Fix
Minimum fixed version
0:11.9.0-5.el10_2
This is the first release that contains the fix.
sudo dnf update dogtag-pkiTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate patching is not feasible, consider implementing strict access controls and monitoring for unusual activities on the affected systems as a temporary measure. Regularly review logs and user activities to identify potential exploitation attempts.
Conclusion
The vulnerabilities in the Dogtag PKI packages pose a significant risk to systems relying on this PKI solution. It is crucial to apply the recommended updates promptly to mitigate potential security threats. Users should also consider utilizing tools like Vulert to monitor for vulnerabilities in their applications continuously.
See every vulnerability recorded for dogtag-pki →
FAQ
The main vulnerabilities are related to inadequate input validation, which could allow unauthorized access to sensitive data.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The CVSS score of the vulnerability is 8.1, indicating a high severity level.
Implement strict access controls and monitor for unusual activities as a temporary workaround until you can apply the patch.
More information can be found in the Red Hat Security Advisory RHSA-2026:73765 and on the official Red Hat security website.
Related vulnerabilities
Recent vulnerabilities recorded for dogtag-pki.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.