Red Hat Unauth Query of Security Domain Hosts via /ca/rest API
CVE-2026-53682 Published on September 1, 2026
Pki-core: dogtag-pki: unauthenticated dogtag ca rest api exposes security domain hosts
An unauthenticated client can query the Security Domain hosts inventory via GET /ca/rest/securityDomain/hosts and receive a structured response enumerating internal PKI/CA hosts and roles (security domain topology and participating subsystems), without requiring a principal, client certificate, or session.
Vulnerability Analysis
CVE-2026-53682 is exploitable with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality, a small impact on integrity and availability.
Timeline
Reported to Red Hat.
Made public. 83 days later.
Weakness Types
What is an Information Disclosure Vulnerability?
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
CVE-2026-53682 has been classified to as an Information Disclosure vulnerability or weakness.
What is an Authorization Vulnerability?
The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CVE-2026-53682 has been classified to as an Authorization vulnerability or weakness.
Products Associated with CVE-2026-53682
stack.watch emails you whenever new vulnerabilities are published in Red Hat Certificate System or Red Hat Enterprise Linux (RHEL). Just hit a watch button to start following.
