CVE-2026-114406 vulnerability in Red Hat Products
Published on October 21, 2026

Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns
The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue certificates for arbitrary host names signed by the weak intermediate CA certificates, which would be considered trusted by a TLS/SSL client using system CA store and cause such clients to connect to malicious sites. Due to inability to only distrust specific intermediate certificates in all clients using the system CA store, root CA certificates of authorities that signed weak intermediate CA certificates are being removed.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD

Vulnerability Analysis

CVE-2026-114406 is exploitable with network access, requires user interaction. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality and integrity, and no impact on availability.

Attack Vector:

NETWORK

Attack Complexity:

HIGH

Privileges Required:

NONE

User Interaction:

REQUIRED

Scope:

UNCHANGED

Confidentiality Impact:

HIGH

Integrity Impact:

HIGH

Availability Impact:

NONE

Timeline

2026-10-20

Reported to Red Hat.

2026-10-20

Made public.

Weakness Type

Improper Certificate Validation

The software does not validate, or incorrectly validates, a certificate. When a certificate is invalid or malicious, it might allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. The software might connect to a malicious host while believing it is a trusted host, or the software might be deceived into accepting spoofed data that appears to originate from a trusted host.

Products Associated with CVE-2026-114406

Want to know whenever a new CVE is published for Red Hat products? stack.watch will email you.

Red Hat Enterprise Linux (RHEL)

Red Hat Enterprise Linux Eus

Red Hat Rhel Els

Red Hat Rhel Aus

Red Hat Rhel Eus Long Life

Red Hat Rhel E4s

Red Hat Rhel Tus

Red Hat Rhel Eus

Red Hat Openshift

Red Hat Openstack

Red Hat Agentic Cluster Security Suite

Red Hat Advanced Cluster Security

Red Hat Hummingbird

Red Hat Openshift Ai

Red Hat Openshift Builds

Red Hat Openshift Devspaces

Red Hat Rhui

Red Hat Ai Inference Server

Red Hat Enterprise Linux Ai

Red Hat Openshift Gitops

Affected Versions

Red Hat Enterprise Linux 10:

Version 0:2026.2.92_v9.0.319-100.3.el10_2 and below * is unaffected.

Red Hat Enterprise Linux 10.0 Extended Update Support:

Version 0:2026.2.92_v9.0.319-100.3.el10_0 and below * is unaffected.

Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION:

Version 0:2026.2.92_v9.0.319-60.3.el6_10 and below * is unaffected.

Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION:

Version 0:3.44.0-15.el6_10 and below * is unaffected.

Red Hat Enterprise Linux 7 Extended Lifecycle Support:

Version 0:2026.2.92_v9.0.319-70.3.el7_9 and below * is unaffected.

Red Hat Enterprise Linux 8:

Version 0:2026.2.92_v9.0.319-81.3.el8_10 and below * is unaffected.

Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support:

Version 0:2026.2.92_v9.0.319-80.3.el8_4 and below * is unaffected.

Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support:

Version 0:2026.2.92_v9.0.319-80.3.el8_6 and below * is unaffected.

Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On:

Version 0:2026.2.92_v9.0.319-80.3.el8_6 and below * is unaffected.

Red Hat Enterprise Linux 8.8 Telecommunications Update Service:

Version 0:2026.2.92_v9.0.319-80.3.el8_8 and below * is unaffected.

Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions:

Version 0:2026.2.92_v9.0.319-80.3.el8_8 and below * is unaffected.

Red Hat Enterprise Linux 9:

Version 0:2026.2.92_v9.0.319-90.3.el9_8 and below * is unaffected.

Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions:

Version 0:2026.2.92_v9.0.319-90.3.el9_2 and below * is unaffected.

Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions:

Version 0:2026.2.92_v9.0.319-90.3.el9_4 and below * is unaffected.

Red Hat Enterprise Linux 9.6 Extended Update Support:

Version 0:2026.2.92_v9.0.319-90.3.el9_6 and below * is unaffected.

Red Hat OpenShift Container Platform 4.12:

Version 412.86.202610250235-0 and below * is unaffected.

Red Hat OpenShift Container Platform 4.14:

Version 414.92.202610242240-0 and below * is unaffected.

Red Hat OpenShift Container Platform 4.16:

Version 416.94.202610242150-0 and below * is unaffected.

Red Hat OpenShift Container Platform 4.18:

Version 418.94.202610242013-0 and below * is unaffected.

Red Hat OpenShift Container Platform 4.19:

Version 4.19.9.6.202610241701-0 and below * is unaffected.

Red Hat OpenShift Container Platform 4.20:

Version 4.20.9.6.202610242033-0 and below * is unaffected.

Red Hat OpenShift Container Platform 4.21:

Version 4.21.9.6.202610241345-0 and below * is unaffected.

Red Hat OpenShift Container Platform 4.22:

Version 4.22.9.8.202610241758-0 and below * is unaffected.

Red Hat OpenStack Platform 13.0 - ELS:

Version 0:1.8.33-2.el7ost and below * is unaffected.

Red Hat OpenStack Platform 16.2:

Version 0:1.12.119-4.el8ost and below * is unaffected.

Red Hat OpenStack Platform 17.1 for RHEL 9:

Version 0:1.20.68-2.el9ost and below * is unaffected.

Red Hat OpenStack Services on OpenShift 18.0:

Version 0:1.27.89-3.el9ost and below * is unaffected.

Red Hat agentic cluster security suite 0.2:

Version 1793102187 and below * is unaffected.

Red Hat Advanced Cluster Security for Kubernetes 4.10:

Version 1793184257 and below * is unaffected.

Red Hat Hardened Images:

Version 2026.2.92_v9.0.319-1.hum1 and below * is unaffected.

Red Hat OpenShift AI 3.0:

Version 1793041986 and below * is unaffected.

Red Hat OpenShift AI 3.0:

Version 1793041981 and below * is unaffected.

Red Hat OpenShift AI 3.0:

Version 1793042072 and below * is unaffected.

Red Hat OpenShift AI 3.0:

Version 1793042067 and below * is unaffected.

Red Hat OpenShift AI 3.0:

Version 1793041987 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1793042006 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1793042145 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1793042006 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1793042011 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1793042086 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1793042088 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1793041995 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1793042074 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1793042008 and below * is unaffected.

Red Hat OpenShift AI 3.5:

Version 1793042010 and below * is unaffected.

Red Hat OpenShift AI 3.5:

Version 1793042162 and below * is unaffected.

Red Hat OpenShift AI 3.5:

Version 1793042004 and below * is unaffected.

Red Hat OpenShift AI 3.5:

Version 1793042092 and below * is unaffected.

Red Hat OpenShift AI 3.5:

Version 1793042117 and below * is unaffected.

Red Hat OpenShift AI 3.5:

Version 1793042093 and below * is unaffected.

Red Hat OpenShift AI 3.5:

Version 1793042114 and below * is unaffected.

Red Hat OpenShift AI 3.5:

Version 1793042024 and below * is unaffected.

Red Hat OpenShift AI 3.5:

Version 1793042008 and below * is unaffected.

Red Hat OpenShift Builds 1.8.3:

Version 1792840135 and below * is unaffected.

Red Hat OpenShift Builds 1.8.3:

Version 1792835365 and below * is unaffected.

Red Hat OpenShift Builds 1.8.3:

Version 1792835298 and below * is unaffected.

Red Hat OpenShift Builds 1.8.3:

Version 1792836805 and below * is unaffected.

Red Hat OpenShift Builds 1.8.3:

Version 1792844269 and below * is unaffected.

Red Hat OpenShift Builds 1.8.3:

Version 1792837466 and below * is unaffected.

Red Hat OpenShift Builds 1.8.3:

Version 1792838794 and below * is unaffected.

Red Hat OpenShift Builds 1.8.3:

Version 1792837567 and below * is unaffected.

Red Hat OpenShift Builds 1.8.3:

Version 1792851895 and below * is unaffected.

Red Hat OpenShift Builds 1.9.2:

Version 1792837598 and below * is unaffected.

Red Hat OpenShift Builds 1.9.2:

Version 1792837398 and below * is unaffected.

Red Hat OpenShift Builds 1.9.2:

Version 1792838765 and below * is unaffected.

Red Hat OpenShift Builds 1.9.2:

Version 1792835879 and below * is unaffected.

Red Hat OpenShift Builds 1.9.2:

Version 1792859629 and below * is unaffected.

Red Hat OpenShift Builds 1.9.2:

Version 1792857112 and below * is unaffected.

Red Hat OpenShift Builds 1.9.2:

Version 1792840655 and below * is unaffected.

Red Hat OpenShift Builds 1.9.2:

Version 1792839475 and below * is unaffected.

Red Hat OpenShift Builds 1.9.2:

Version 1792835571 and below * is unaffected.