Vulnerability feed

Executive summary

Red Hat has released a Critical security update for the ca-certificates package on Red Hat Enterprise Linux 8.8 systems, including Update Services for SAP Solutions and Telecommunications Update Service variants. The update distrusts eMudhra intermediate Certificate Authority certificates because of security concerns. Red Hat recommends applying the updated package to affected systems.

Technical summary

The advisory describes a single fix, CVE-2026-114406, which distrusts eMudhra intermediate CA certificates in the ca-certificates package because of security concerns; the advisory does not give a detailed vulnerability class, attack vector, or preconditions beyond referring to the CVE page, and it does not state a CVSS score in the text provided. The fixed package version is ca-certificates-2026.2.92_v9.0.319-80.3.el8_8, and the advisory does not state any affected (vulnerable) version range. No workarounds are stated. No detection guidance or evidence of exploitation in the wild is stated. Administrators are directed to the Red Hat update article at https://access.redhat.com/articles/11258 for application steps.

Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source.

Summarized from access.redhat.com/errata/RHSA-2026:88662

Impact if exploited

How it is exploited

Attack vector

Network

Attack complexity

High

Privileges required

None

User interaction

Required

Scope

Unchanged

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Affects

Red HatMozillaRed Hat Enterprise LinuxMozilla ca-certificatesRed Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.8Red Hat Enterprise Linux Server - TUS 8.8Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8