CVE-2026-114406mediumCWE-295

CVE-2026-114406: falha de média gravidade em Red Hat agentic cluster security suite 0.2

Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Red Hat Enterprise Linux+ Monitorar Red Hat OpenShift Container Platform

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.8epss 0.3%
The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue certificates for arbitrary host names signed by the weak intermediate CA certificates, which would be considered trusted by a TLS/SSL client using system CA store and cause such clients to connect to malicious sites. Due to inability to only distrust specific intermediate certificates in all clients using the system CA store, root CA certificates of authorities that signed weak intermediate CA certificates are being removed.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
Produtos afetados
Red Hat · agentic cluster security suite 0.2Red Hat · Cost Management 4Red Hat · Red Hat Advanced Cluster Security for Kubernetes 4.11Red Hat · Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10Red Hat · Red Hat AI Inference ServerRed Hat · Red Hat AI Inference Server 3.5Red Hat · Red Hat Cost Management On-Premise 1Red Hat · Red Hat Developer Hub 1Red Hat · Red Hat Developer Hub 2Red Hat · Red Hat Discovery 2Red Hat · Red Hat Enterprise Linux 10Red Hat · Red Hat Enterprise Linux 10.0 Extended Update SupportRed Hat · Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSIONRed Hat · Red Hat Enterprise Linux 7 Extended Lifecycle SupportRed Hat · Red Hat Enterprise Linux 8Red Hat · Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportRed Hat · Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportRed Hat · Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-OnRed Hat · Red Hat Enterprise Linux 8.8 Telecommunications Update ServiceRed Hat · Red Hat Enterprise Linux 8.8 Update Services for SAP SolutionsRed Hat · Red Hat Enterprise Linux 9Red Hat · Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsRed Hat · Red Hat Enterprise Linux 9.4 Update Services for SAP SolutionsRed Hat · Red Hat Enterprise Linux 9.6 Extended Update SupportRed Hat · Red Hat Enterprise Linux AI (RHEL AI) 3Red Hat · Red Hat Hardened ImagesRed Hat · Red Hat OpenShift AI 3.0Red Hat · Red Hat OpenShift AI 3.4Red Hat · Red Hat OpenShift AI 3.5Red Hat · Red Hat OpenShift AI (RHOAI)Red Hat · Red Hat OpenShift Builds 1.8.3Red Hat · Red Hat OpenShift Builds 1.9.2Red Hat · Red Hat OpenShift Container Platform 4.12Red Hat · Red Hat OpenShift Container Platform 4.14Red Hat · Red Hat OpenShift Container Platform 4.16Red Hat · Red Hat OpenShift Container Platform 4.18Red Hat · Red Hat OpenShift Container Platform 4.19Red Hat · Red Hat OpenShift Container Platform 4.20Red Hat · Red Hat OpenShift Container Platform 4.21Red Hat · Red Hat OpenShift Container Platform 4.22Red Hat · Red Hat OpenShift Container Platform 5Red Hat · Red Hat OpenShift Dev Spaces 3.31Red Hat · Red Hat OpenShift for Windows Containers 11.0Red Hat · Red Hat OpenShift GitOps 1.20Red Hat · Red Hat OpenShift GitOps 1.21Red Hat · Red Hat OpenShift GitOps 1.22Red Hat · Red Hat OpenStack Platform 13.0 - ELSRed Hat · Red Hat OpenStack Platform 16.2Red Hat · Red Hat OpenStack Platform 17.1 for RHEL 9Red Hat · Red Hat OpenStack Services on OpenShift 18.0Red Hat · Red Hat Update Infrastructure 5Red Hat · Service Interconnect 2 for RHEL 9
CVEs relacionadas — Red Hat agentic cluster security suite 0.2

No mesmo produto, das mais perigosas para as menos.

CVE-2026-2100MEDIUMP11-kit: null dereference via c_derivekey with specific null parametersEPSS 1.3%CVE-2026-9165HIGHStackrox: stackrox: unbounded graphql query depth allows authenticated denial of serviceEPSS 0.5%CVE-2026-18382MEDIUMProject-koku/koku-metrics-operator: koku-metrics-operator: service-account client credentials sent to user-controlled token_urlEPSS 0.5%CVE-2026-18378HIGHProject-koku/koku-metrics-operator: koku-metrics-operator: cluster pull-secret token exfiltration via user-controlled api_url (ssrf / confused deputy)EPSS 0.5%CVE-2026-103314HIGHStackrox: stackrox: saml response replay allows multiple central authentication tokensEPSS 0.4%CVE-2026-18381HIGHProject-koku/koku-metrics-operator: koku-metrics-operator: operator service-account token exfiltration via user-controlled prometheus service_addressEPSS 0.4%