Red Hat Unauth Query of Security Domain Hosts via /ca/rest API
CVE-2026-53682 Published on September 1, 2026

Pki-core: dogtag-pki: unauthenticated dogtag ca rest api exposes security domain hosts
An unauthenticated client can query the Security Domain hosts inventory via GET /ca/rest/securityDomain/hosts and receive a structured response enumerating internal PKI/CA hosts and roles (security domain topology and participating subsystems), without requiring a principal, client certificate, or session.

NVD

Vulnerability Analysis

CVE-2026-53682 is exploitable with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality, a small impact on integrity and availability.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
LOW
Integrity Impact:
NONE
Availability Impact:
NONE

Timeline

Reported to Red Hat.

Made public. 83 days later.


Products Associated with CVE-2026-53682

stack.watch emails you whenever new vulnerabilities are published in Red Hat Certificate System or Red Hat Enterprise Linux (RHEL). Just hit a watch button to start following.

Red Hat Certificate System
 
Red Hat Enterprise Linux (RHEL)
 

Affected Versions

Red Hat Certificate System 9: Red Hat Enterprise Linux 10: Red Hat Enterprise Linux 6: Red Hat Enterprise Linux 7: Red Hat Enterprise Linux 8: Red Hat Enterprise Linux 9: