PT-2026-121547

Name of the Vulnerable Software and Affected Versions OpenBao versions 2.5.0 through 2.6.1 Description When the use csr sans setting is enabled, the software fails to enforce the allowed ip sans cidr restriction on IP Subject Alternative Names SANs extracted from a Certificate Signing Request CSR...

CVE-2026-114472

Insufficient resource pool in the ACME HTTP-01 challenge responder of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to cause a certificate issuance or renewal to fail. When the server obtains or renews a TLS certificate over ACME it runs an HTTP-01...

EUVD-2026-107315

Insufficient resource pool in the ACME HTTP-01 challenge responder of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to cause a certificate issuance or renewal to fail. When the server obtains or renews a TLS certificate over ACME it runs an HTTP-01...

PT-2026-120650

Insufficient resource pool in the ACME HTTP-01 challenge responder of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to cause a certificate issuance or renewal to fail. When the server obtains or renews a TLS certificate over ACME it runs an HTTP-01...

CVE-2026-104092

Impact OpenBao's PKI engine supports the Automatic Certificate Management Environment ACME - RFC 8555 protocol for certificate issuance. When enabled and configured by an operator, PKI did not correctly validate the certificate's SANs against the ACME protocol's completed orders, letting an...

EUVD-2026-94641

Vault's PKI secrets engine ACME server did not restrict certificate identities that ACME challenges do not validate when issuing certificates under the default directory policy. This may allow an ACME client to obtain a certificate containing unverified identity claims, potentially enabling...

EUVD-2026-95205

Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and issue unauthorized certificates...

PT-2026-108162

Name of the Vulnerable Software and Affected Versions GnuTLS version 3.8.13 Description An incomplete X.509 implementation allows attackers who control a subordinate Certificate Authority to bypass cross-domain Public Key Infrastructure PKI restrictions and issue unauthorized certificates...

CVE-2026-88648

Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and issue unauthorized certificates...

CVE-2026-105818

Vault's PKI secrets engine ACME server did not restrict certificate identities that ACME challenges do not validate when issuing certificates under the default directory policy. This may allow an ACME client to obtain a certificate containing unverified identity claims, potentially enabling...

CVE-2026-105818: Insufficient Verification of Data Authenticity

Vault's PKI secrets engine ACME server did not restrict certificate identities that ACME challenges do not validate when issuing certificates under the default directory policy. This may allow an ACME client to obtain a certificate containing unverified identity claims, potentially enabling...

CVE-2026-104988

A flaw was found in Dogtag PKI pki-core. The CMCAuthForEST authentication plugin fails open when an EST fullcmc enrollment request is submitted via BasicAuth without an end-user TLS client certificate. The SSLCLIENTCERT session attribute retains the EST subsystem's agent certificate, which causes...

CVE-2026-104988

A flaw was found in Dogtag PKI pki-core. The CMCAuthForEST authentication plugin fails open when an EST fullcmc enrollment request is submitted via BasicAuth without an end-user TLS client certificate. The SSLCLIENTCERT session attribute retains the EST subsystem's agent certificate, which causes...

PT-2026-104424

Name of the Vulnerable Software and Affected Versions Dogtag PKI pki-core affected versions not specified Description A flaw in the CMCAuthForEST authentication plugin allows an authentication bypass during EST fullcmc enrollment requests. When a request is submitted via BasicAuth without an...

BIT-OPENBAO-2026-71543 OpenBao's Templated Policies Allow Privilege Escalation via Wildcard Characters

OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, templated ACL, PKI, and SSH policies could substitute attacker-controlled identity data without rejecting syntax-significant characters. In ACL templated policies, asterisks, plus signs, and slashes could alter pa...

PT-2026-102743

OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, templated ACL, PKI, and SSH policies could substitute attacker-controlled identity data without rejecting syntax-significant characters. In ACL templated policies, asterisks, plus signs, and slashes could alter pa...

Excluded iPAddress name constraints with an all-zero mask are not applied

An excludedsubtrees iPAddress name constraint with an all-zero mask 0.0.0.0/0 or ::/0 does not restrict iPAddress SANs in certificates issued beneath it. The mask check treated an all-zero mask as matching nothing, when a /0 prefix matches every address of its family, so the exclusion was silentl...

CVE-2026-71543

A flaw was found in OpenBao, an open-source identity-based secrets management system. Templated Access Control List ACL, Public Key Infrastructure PKI, and Secure Shell SSH policies could substitute attacker-controlled identity data without properly rejecting syntax-significant characters. This...

CVE-2026-71543

OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, templated ACL, PKI, and SSH policies could substitute attacker-controlled identity data without rejecting syntax-significant characters. In ACL templated policies, asterisks, plus signs, and slashes could alter pa...

Security Bulletin: Impacted IBM optim (spark) 1.0.0, 1.1.0, 1.2.0 by vulnerabilities in packages github.com/smallstep/certificates

Summary Impacted IBM optim spark 1.0.0, 1.1.0, 1.2.0 by vulnerabilities in packages github.com/smallstep/certificates. IBM Optim 2.0.0 resolves these vulnerabilities by upgrading the affected open-source dependencies to fixed versions. Vulnerability Details CVEID:CVE-2025-44005 DESCRIPTION: An...