<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: red-hat-certificate-system-9</title><description>Every new CVE for red-hat-certificate-system-9.</description><link>https://agentprime.io/</link><item><title>CVE-2026-104988: Pki-core: dogtag-pki: redhat-pki: pki: est fullcmc authentication bypass allows certificate mis-issuance with arbitrary subject</title><link>https://agentprime.io/advisories/CVE-2026-104988/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-104988/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 02 Oct 2026 19:34:33 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-80110: Pki-core: dogtag pki v2 rest acl filter&apos;s reverse-lexicographic tie-break lets a ca agent invoke the admin-only raw profile creation endpoint</title><link>https://agentprime.io/advisories/CVE-2026-80110/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-80110/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 21 Sep 2026 14:05:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-76561: Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint)</title><link>https://agentprime.io/advisories/CVE-2026-76561/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-76561/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 08 Sep 2026 07:55:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-53682: Pki-core: dogtag-pki: unauthenticated dogtag ca rest api exposes security domain hosts</title><link>https://agentprime.io/advisories/CVE-2026-53682/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-53682/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 01 Sep 2026 12:37:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-11873: Pki-core: dogtag-pki: empty request to dogtag /ca/rest/certrequests causes http 500, java exception, and stacktrace disclosure</title><link>https://agentprime.io/advisories/CVE-2026-11873/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-11873/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 01 Sep 2026 11:54:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-18369: Dogtag-pki: pki-core: redhat-pki: pki: acme http-01 validation ssrf via ip literal identifiers and unvalidated redirects</title><link>https://agentprime.io/advisories/CVE-2026-18369/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-18369/</guid><description>CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 30 Jul 2026 10:32:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-18047: Dogtag-pki: pki-core: redhat-pki: pki: acme admin enable/disable endpoint authentication bypass via trailing slash</title><link>https://agentprime.io/advisories/CVE-2026-18047/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-18047/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 28 Jul 2026 12:44:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-17039: Pki-core: dogtag-pki: redhat-pki: pki-core: ca renewal request processing omits realm authorization check performed by enrollment path</title><link>https://agentprime.io/advisories/CVE-2026-17039/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-17039/</guid><description>CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 24 Jul 2026 15:12:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-12353: Rhcs: memory leak during https connection leads to denial of service</title><link>https://agentprime.io/advisories/CVE-2026-12353/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-12353/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 23 Jul 2026 19:10:58 GMT</pubDate><category>CVE</category></item></channel></rss>