Description
The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue certificates for arbitrary host names signed by the weak intermediate CA certificates, which would be considered trusted by a TLS/SSL client using system CA store and cause such clients to connect to malicious sites.

Due to inability to only distrust specific intermediate certificates in all clients using the system CA store, root CA certificates of authorities that signed weak intermediate CA certificates are being removed.
Published: 2026-10-21
Score: 6.8 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

Vendor Workaround

See the security bulletin for a detailed mitigation procedure.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 21 Oct 2026 21:00:00 +0000

Type Values Removed Values Added
Description The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue certificates for arbitrary host names signed by the weak intermediate CA certificates, which would be considered trusted by a TLS/SSL client using system CA store and cause such clients to connect to malicious sites. Due to inability to only distrust specific intermediate certificates in all clients using the system CA store, root CA certificates of authorities that signed weak intermediate CA certificates are being removed.
Title Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns
First Time appeared Redhat
Redhat acm
Redhat advanced Cluster Security
Redhat assisted Installer
Redhat cert Manager
Redhat confidential Compute Attestation
Redhat connectivity Link
Redhat container Native Virtualization
Redhat enterprise Linux
Redhat hummingbird
Redhat kernel Module Management
Redhat kube Descheduler Operator
Redhat logging
Redhat lvms
Redhat migration Toolkit Applications
Redhat migration Toolkit Virtualization
Redhat multicluster Engine
Redhat network Observ Optr
Redhat openshift
Redhat openshift Distributed Tracing
Redhat quay
Redhat rhmt
Redhat satellite
Redhat serverless
Redhat service Mesh
Redhat windows Machine Config
Weaknesses CWE-295
CPEs cpe:/a:redhat:acm:2
cpe:/a:redhat:advanced_cluster_security:4
cpe:/a:redhat:assisted_installer:2
cpe:/a:redhat:cert_manager:1
cpe:/a:redhat:confidential_compute_attestation:1
cpe:/a:redhat:connectivity_link:1
cpe:/a:redhat:container_native_virtualization:4
cpe:/a:redhat:container_native_virtualization:5
cpe:/a:redhat:hummingbird:1
cpe:/a:redhat:kernel_module_management:2
cpe:/a:redhat:kube_descheduler_operator:5
cpe:/a:redhat:logging:6
cpe:/a:redhat:lvms:4
cpe:/a:redhat:lvms:5
cpe:/a:redhat:migration_toolkit_applications:8
cpe:/a:redhat:migration_toolkit_virtualization:2
cpe:/a:redhat:multicluster_engine
cpe:/a:redhat:network_observ_optr:1
cpe:/a:redhat:openshift:4
cpe:/a:redhat:openshift_distributed_tracing:3
cpe:/a:redhat:quay:3
cpe:/a:redhat:rhmt:1
cpe:/a:redhat:satellite:6
cpe:/a:redhat:serverless:1
cpe:/a:redhat:service_mesh:3
cpe:/a:redhat:windows_machine_config
cpe:/o:redhat:enterprise_linux:10
cpe:/o:redhat:enterprise_linux:6
cpe:/o:redhat:enterprise_linux:7
cpe:/o:redhat:enterprise_linux:8
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat acm
Redhat advanced Cluster Security
Redhat assisted Installer
Redhat cert Manager
Redhat confidential Compute Attestation
Redhat connectivity Link
Redhat container Native Virtualization
Redhat enterprise Linux
Redhat hummingbird
Redhat kernel Module Management
Redhat kube Descheduler Operator
Redhat logging
Redhat lvms
Redhat migration Toolkit Applications
Redhat migration Toolkit Virtualization
Redhat multicluster Engine
Redhat network Observ Optr
Redhat openshift
Redhat openshift Distributed Tracing
Redhat quay
Redhat rhmt
Redhat satellite
Redhat serverless
Redhat service Mesh
Redhat windows Machine Config
References
Metrics cvssV3_1

{'score': 6.8, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N'}

Subscriptions

Redhat Acm Advanced Cluster Security Assisted Installer Cert Manager Confidential Compute Attestation Connectivity Link Container Native Virtualization Enterprise Linux Hummingbird Kernel Module Management Kube Descheduler Operator Logging Lvms Migration Toolkit Applications Migration Toolkit Virtualization Multicluster Engine Network Observ Optr Openshift Openshift Distributed Tracing Quay Rhmt Satellite Serverless Service Mesh Windows Machine Config
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2026-10-21T20:56:26.866Z

Reserved: 2026-10-21T11:57:07.758Z

Link: CVE-2026-114406

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-21T21:17:58.547

Modified: 2026-10-21T21:17:58.547

Link: CVE-2026-114406

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses
  • CWE-295

    Improper Certificate Validation