Vulnerability feed

Executive summary

This Red Hat advisory covers a security update for the ca-certificates package on Red Hat Enterprise Linux 7 Extended Lifecycle Support systems across x86_64, IBM z Systems, and IBM Power platforms. Red Hat rates the update as Critical and says it distrusts eMudhra intermediate CA certificates due to security concerns. Red Hat recommends applying the updated ca-certificates package.

Technical summary

The flaw is tracked as CVE-2026-114406 and is fixed by distrusting eMudhra intermediate CA certificates in the ca-certificates package, which contains Mozilla-selected CA certificates used for Internet PKI. The advisory does not describe the specific vulnerability class, attack vector, or preconditions for exploitation. The fixed package version is ca-certificates-2026.2.92_v9.0.319-70.3.el7_9, and the advisory lists no workarounds. No CVSS score is given in the text itself, and it is not stated whether the issue is exploited in the wild. The advisory provides no detection guidance beyond the package update and a link to the Red Hat article on applying updates.

Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source.

Summarized from access.redhat.com/errata/RHSA-2026:88779

Impact if exploited

How it is exploited

Attack vector

Network

Attack complexity

High

Privileges required

None

User interaction

Required

Scope

Unchanged

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Affects

Red HatMozillaRed Hat Enterprise LinuxRed Hat Enterprise Linux Server - Extended Life Cycle Support 7Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7Mozilla ca-certificates