Vulnerability feed

CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run Oct 26 02:05 UTC

Critical in the last 24 hours

1603 in 30 days

Newly known exploited

In the last 24 hours, CISA KEV and vendor reports

Sources checked

Every hour, see the list

New in the last 24 hours

144-76% vs 7-day avg of 597

2 critical, 38 high, 59 medium, 25 low

Expand	Severity	Score	Advisory	Title	Source	Published
	Medium	6.8	RHSA-2026:88779	ca-certificates security update Red Hat, MozillaRed Hat Enterprise Linux, Red Hat Enterprise Linux Server - Extended Life Cycle Support 7, Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7, Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7, Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7, Mozilla ca-certificates	Red Hat Security Advisories	Oct 23 19:53 UTC
RHSA-2026:88779CVE-2026-114406ca-certificates security update Executive summary This Red Hat advisory covers a security update for the ca-certificates package on Red Hat Enterprise Linux 7 Extended Lifecycle Support systems across x86_64, IBM z Systems, and IBM Power platforms. Red Hat rates the update as Critical and says it distrusts eMudhra intermediate CA certificates due to security concerns. Red Hat recommends applying the updated ca-certificates package. Technical summary The flaw is tracked as CVE-2026-114406 and is fixed by distrusting eMudhra intermediate CA certificates in the ca-certificates package, which contains Mozilla-selected CA certificates used for Internet PKI. The advisory does not describe the specific vulnerability class, attack vector, or preconditions for exploitation. The fixed package version is ca-certificates-2026.2.92_v9.0.319-70.3.el7_9, and the advisory lists no workarounds. No CVSS score is given in the text itself, and it is not stated whether the issue is exploited in the wild. The advisory provides no detection guidance beyond the package update and a link to the Red Hat article on applying updates. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from access.redhat.com/errata/RHSA-2026:88779 Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityNone How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N Affects Red Hat Mozilla Red Hat Enterprise Linux Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 Mozilla ca-certificates Red Hat Product SecurityPublished Oct 23, 2026 19:53 UTC Read the advisory
	Medium	6.8	RHSA-2026:88562	ca-certificates security update Red Hat, MozillaRed Hat Enterprise Linux, Mozilla ca-certificates	Red Hat Security Advisories	Oct 23 19:43 UTC
RHSA-2026:88562CVE-2026-114406ca-certificates security update Executive summary This Red Hat advisory covers a critical update to the ca-certificates package on Red Hat Enterprise Linux 9.2 systems, including several Update Services and Extended Life Cycle variants. The update distrusts eMudhra intermediate Certificate Authority certificates because of security concerns, and Red Hat rates it Critical. Red Hat recommends applying the ca-certificates update described in the advisory on affected systems. Technical summary The flaw is tracked as CVE-2026-114406 and is described as a decision to distrust eMudhra intermediate CA certificates due to security concerns, so the vulnerability class is not stated beyond that. The advisory does not describe the attack vector, exploitation preconditions, or whether exploitation has occurred. The fixed package is ca-certificates-2026.2.92_v9.0.319-90.3.el9_2 for the listed RHEL 9.2 variants. The advisory does not state a CVSS score in the text provided, and it refers readers to the CVE page for it. No workaround is stated, and no detection guidance is stated beyond applying the update per the linked Red Hat article. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from access.redhat.com/errata/RHSA-2026:88562 Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityNone How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N Affects Red Hat Mozilla Red Hat Enterprise Linux Mozilla ca-certificates Red Hat Product SecurityPublished Oct 23, 2026 19:43 UTC Read the advisory
	Medium	6.8	RHSA-2026:88563	ca-certificates security update Red Hat, MozillaRed Hat Enterprise Linux, Mozilla ca-certificates	Red Hat Security Advisories	Oct 23 13:24 UTC
RHSA-2026:88563CVE-2026-114406ca-certificates security update Executive summary Red Hat published a critical security update for the ca-certificates package on Red Hat Enterprise Linux 9.6 Extended Update Support and related subscriptions. The update distrusts eMudhra intermediate Certificate Authority certificates because of security concerns, and Red Hat recommends applying the updated package. The advisory does not state a CVSS score or whether the issue is being exploited. Technical summary The flaw is tracked as CVE-2026-114406 and concerns the ca-certificates trust store, which the advisory says should distrust eMudhra intermediate CA certificates due to security concerns. The advisory does not describe the vulnerability class, attack vector, or preconditions beyond this. The fixed package is ca-certificates-2026.2.92_v9.0.319-90.3.el9_6, and the advisory lists it for the affected Red Hat Enterprise Linux 9.6 variants across x86_64, s390x, ppc64le, and aarch64. The advisory does not state a CVSS score, workarounds, or detection guidance, and it refers readers to https://access.redhat.com/articles/11258 for how to apply the update. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from access.redhat.com/errata/RHSA-2026:88563 Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityNone How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N Affects Red Hat Mozilla Red Hat Enterprise Linux Mozilla ca-certificates Red Hat Product SecurityPublished Oct 23, 2026 13:24 UTC Read the advisory
	Medium	6.8	RHSA-2026:88669	ca-certificates security update Red Hat, MozillaRed Hat Enterprise Linux, Mozilla ca-certificates, Red Hat Enterprise Linux Server - AUS 8.4	Red Hat Security Advisories	Oct 23 12:16 UTC
RHSA-2026:88669CVE-2026-114406ca-certificates security update Executive summary Red Hat has released a critical security update for the ca-certificates package on Red Hat Enterprise Linux Server AUS 8.4 x86_64. The update distrusts eMudhra intermediate Certificate Authority certificates because of security concerns, and Red Hat recommends applying the update. Technical summary The advisory describes a single fix, CVE-2026-114406, which distrusts eMudhra intermediate CA certificates in the ca-certificates package because of security concerns. The advisory does not state the vulnerability class, attack vector, or preconditions, and it does not give a CVSS score beyond the Critical rating, which is linked to a classification page. The fixed package is ca-certificates-2026.2.92_v9.0.319-80.3.el8_4 as written in the advisory, with SHA-256 checksums provided for the SRPM and the noarch RPM. No workarounds or detection guidance are stated, and exploitation in the wild is not stated. Administrators should refer to the Red Hat article at https://access.redhat.com/articles/11258 for application instructions. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from access.redhat.com/errata/RHSA-2026:88669 Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityNone How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N Affects Red Hat Mozilla Red Hat Enterprise Linux Mozilla ca-certificates Red Hat Enterprise Linux Server - AUS 8.4 Red Hat Product SecurityPublished Oct 23, 2026 12:16 UTC Read the advisory
	Medium	6.8	RHSA-2026:88662	ca-certificates security update Red Hat, MozillaRed Hat Enterprise Linux, Mozilla ca-certificates, Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.8, Red Hat Enterprise Linux Server - TUS 8.8, Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8, Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8	Red Hat Security Advisories	Oct 23 11:50 UTC
RHSA-2026:88662CVE-2026-114406ca-certificates security update Executive summary Red Hat has released a Critical security update for the ca-certificates package on Red Hat Enterprise Linux 8.8 systems, including Update Services for SAP Solutions and Telecommunications Update Service variants. The update distrusts eMudhra intermediate Certificate Authority certificates because of security concerns. Red Hat recommends applying the updated package to affected systems. Technical summary The advisory describes a single fix, CVE-2026-114406, which distrusts eMudhra intermediate CA certificates in the ca-certificates package because of security concerns; the advisory does not give a detailed vulnerability class, attack vector, or preconditions beyond referring to the CVE page, and it does not state a CVSS score in the text provided. The fixed package version is ca-certificates-2026.2.92_v9.0.319-80.3.el8_8, and the advisory does not state any affected (vulnerable) version range. No workarounds are stated. No detection guidance or evidence of exploitation in the wild is stated. Administrators are directed to the Red Hat update article at https://access.redhat.com/articles/11258 for application steps. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from access.redhat.com/errata/RHSA-2026:88662 Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityNone How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N Affects Red Hat Mozilla Red Hat Enterprise Linux Mozilla ca-certificates Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.8 Red Hat Enterprise Linux Server - TUS 8.8 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 Red Hat Product SecurityPublished Oct 23, 2026 11:50 UTC Read the advisory
	Medium	6.8	RHSA-2026:88564	ca-certificates security update Red Hat, MozillaRed Hat Enterprise Linux, Mozilla ca-certificates	Red Hat Security Advisories	Oct 23 10:00 UTC
RHSA-2026:88564CVE-2026-114406ca-certificates security update Executive summary Red Hat has released a critical security update for the ca-certificates package on Red Hat Enterprise Linux 9.4 systems, including several Update Services, Extended Life Cycle, and AUS variants. The update distrusts eMudhra intermediate Certificate Authority certificates because of security concerns. Red Hat recommends applying the updated package, which the advisory describes as rated Critical by Red Hat Product Security. Technical summary The flaw is tracked as CVE-2026-114406 and concerns the trust store, which distrusts eMudhra intermediate CA certificates due to security concerns; the advisory does not describe the specific vulnerability class or an attack vector. The advisory does not state the preconditions for exploitation, exploitation status in the wild, or a CVSS score, and refers readers to the CVE page for those details. The fixed package is ca-certificates-2026.2.92_v9.0.319-90.3.el9_4 (noarch), and the advisory lists it for the affected 9.4 channels, including AUS, Update Services for SAP Solutions, 4 years of updates, and Extended Life Cycle on x86_64, aarch64, ppc64le, and s390x. No workarounds are stated, and no specific detection guidance is provided; the advisory points to https://access.redhat.com/articles/11258 for update instructions. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from access.redhat.com/errata/RHSA-2026:88564 Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityNone How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N Affects Red Hat Mozilla Red Hat Enterprise Linux Mozilla ca-certificates Red Hat Product SecurityPublished Oct 23, 2026 10:00 UTC Read the advisory
	Medium	6.8	RHSA-2026:88560	ca-certificates security update Red Hat, MozillaRed Hat Enterprise Linux, Mozilla ca-certificates	Red Hat Security Advisories	Oct 23 09:59 UTC
RHSA-2026:88560CVE-2026-114406ca-certificates security update Executive summary This Red Hat advisory covers a ca-certificates update for Red Hat Enterprise Linux 10.0 Extended Update Support and related 4-years-of-updates streams. Red Hat rates it Critical and says the update distrusts eMudhra intermediate CA certificates because of security concerns. Red Hat recommends applying the ca-certificates update as described in its linked guidance. Technical summary The flaw is tracked as CVE-2026-114406 and is described as a decision to distrust eMudhra intermediate CA certificates due to security concerns, so the vulnerability class and attack details are not stated. The advisory does not describe the attack vector or preconditions, and no CVSS score is given in the text (it refers to the CVE page for scores). The fixed package is ca-certificates-2026.2.92_v9.0.319-100.3.el10_0 for the listed RHEL 10.0 architectures, and no affected prior versions are stated. No workarounds or detection guidance are stated; the advisory points to https://access.redhat.com/articles/11258 for how to apply the update. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from access.redhat.com/errata/RHSA-2026:88560 Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityNone How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N Affects Red Hat Mozilla Red Hat Enterprise Linux Mozilla ca-certificates Red Hat Product SecurityPublished Oct 23, 2026 09:59 UTC Read the advisory
	Medium	6.8	RHSA-2026:88459	ca-certificates security update Red Hat, Mozilla, eMudhraRed Hat Enterprise Linux, Red Hat Enterprise Linux 9, Mozilla ca-certificates	Red Hat Security Advisories	Oct 22 23:14 UTC
RHSA-2026:88459CVE-2026-114406ca-certificates security update Executive summary Red Hat has released a security update for the ca-certificates package on Red Hat Enterprise Linux 9, which holds the set of certificate authority certificates trusted by the system. Red Hat rates the update as Critical and says it removes trust in eMudhra intermediate CA certificates over security concerns. Red Hat recommends applying the updated package, version ca-certificates-2026.2.92_v9.0.319-90.3.el9_8, across the affected Enterprise Linux 9 variants. Technical summary The advisory describes one fix, CVE-2026-114406, which distrusts eMudhra intermediate CA certificates because of security concerns; the advisory does not describe the specific vulnerability class, exploit conditions, or attack vector. The fixed package version is ca-certificates-2026.2.92_v9.0.319-90.3.el9_8 (noarch RPM, with SHA-256 checksums listed for each architecture). The advisory does not state any workaround or mutable configuration step beyond applying the update, and it points to https://access.redhat.com/articles/11258 for update instructions. A CVSS score is not stated in the advisory text; it refers readers to the CVE page. No detection guidance, exploitation status, or affected-version range before the fix is stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from access.redhat.com/errata/RHSA-2026:88459 Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityNone How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N Affects Red Hat Mozilla eMudhra Red Hat Enterprise Linux Red Hat Enterprise Linux 9 Mozilla ca-certificates Red Hat Product SecurityPublished Oct 22, 2026 23:14 UTC Read the advisory

Example	Finds
	Every word appears somewhere: title, summaries, IDs, vendor, or product
	An exact phrase
	One vendor. product: for a product, vp: for either
	Commas mean any of them, in every field
	Severity: critical, high, medium, low, or unknown
	CVSS score, with >, >=, <, or <=
	A score range
	Known exploited. is:kev works too, and kev:no leaves them out
	One source, by name
	Confidentiality impact: high, low, none, or any (low or high)
	Integrity and availability work the same way
	An advisory or CVE ID, or part of one
	A minus sign leaves out whatever the term matches

Vulnerability feed

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects