Vulnerability feed
CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run
| Expand | Severity |
Score |
Advisory |
Title |
Source |
Flags |
Published |
|---|---|---|---|---|---|---|---|
| Medium | 6.8 | RHSA-2026:88668 |
ca-certificates security update
Red HatRed Hat Enterprise Linux, Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.6, Red Hat Enterprise Linux Server - AUS 8.6, Red Hat ca-certificates
|
Red Hat Security Advisories | |||
|
RHSA-2026:88668CVE-2026-114406ca-certificates security update
Executive summaryThis Red Hat advisory covers a critical update to the ca-certificates package for Red Hat Enterprise Linux 8.6 Extended Update Support and Advanced Mission Critical Update Support systems. The update distrusts eMudhra intermediate certificate authority certificates because of security concerns. Red Hat recommends applying the updated package from its errata. Technical summaryThe advisory describes one fix, tracked as CVE-2026-114406, which distrusts eMudhra intermediate CA certificates in the ca-certificates trust store. The advisory rates the update Critical but does not state the CVSS base score, the attack vector, or the preconditions for exploitation. The fixed package is ca-certificates-2026.2.92_v9.0.319-80.3.el8_6 for the listed RHEL 8.6 Extended Life Cycle and AUS x86_64 products. The advisory gives no workarounds and no detection guidance, and it points to https://access.redhat.com/articles/11258 for application instructions. Whether the vulnerability is exploited in the wild is not stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from access.redhat.com/errata/RHSA-2026:88668 Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityNone
How it is exploited
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N AffectsRed HatRed Hat Enterprise LinuxRed Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.6Red Hat Enterprise Linux Server - AUS 8.6Red Hat ca-certificates
Red Hat Product SecurityPublished
Read the advisory
|
|||||||