https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-30T03:52:36.480399+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-17039 fkie_cve-2026-17039 2026-09-30T03:52:36.520669+00:00

A flaw was found in pki-core. The certificate authority (CA) renewal request path does not perform the realm-based authorization check that the enrollment path performs, allowing an authenticated user entitled to one realm to cause a certificate belonging to a different realm to be renewed without that realm's authorization.

 https://db.gcve.eu/vuln/ghsa-jq46-23h4-vfpj GHSA-jq46-23h4-vfpj 2026-09-30T03:52:36.520782+00:00

A flaw was found in pki-core. The certificate authority (CA) renewal request path does not perform the realm-based authorization check that the enrollment path performs, allowing an authenticated user entitled to one realm to cause a certificate belonging to a different realm to be renewed without that realm's authorization.

 https://db.gcve.eu/vuln/ubuntu-cve-2026-17039 UBUNTU-CVE-2026-17039 2026-09-30T03:52:36.520815+00:00

Affected: Ubuntu:Pro:16.04:LTS: dogtag-pki, Ubuntu:Pro:18.04:LTS: dogtag-pki, Ubuntu:Pro:20.04:LTS: dogtag-pki, Ubuntu:Pro:22.04:LTS: dogtag-pki

A flaw was found in pki-core. The certificate authority (CA) renewal request path does not perform the realm-based authorization check that the enrollment path performs, allowing an authenticated user entitled to one realm to cause a certificate belonging to a different realm to be renewed without that realm's authorization.