ritm

Ruby In The Middle HTTP/HTTPS interception proxy Ruby in the middle RITM is an HTTP/HTTPS interception proxy with on-the-fly certificate generation and signing, which leaves the user with the full power of the Ruby language to intercept and even modify requests and responses as she pleases...

fulcio

Fulcio A Free-to-Use CA For Code Signing Fulcio is a free-to-use certificate authority for issuing code signing certificates for an OpenID Connect OIDC identity, such as email address. Fulcio only issues short-lived certificates that are valid for 10 minutes. Public Instance Fulcio is in General...

CVE-2022-2414

CVE-2022-2414 CVE-2022-2414 POC 1. Replace YOURHOST with your target like below url url = "https://example.com/ca/rest/certrequests"...

ephemera

Ephemera : Zero-Trust SSH Certificate Authority Ephemera is a lightweight, self-hosted SSH Certificate Authority designed to enforce Zero-Trust access for infrastructure. It replaces static SSH keys with short-lived certificates, integrates hardware-backed WebAuthn MFA, and maintains...

OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios

OpenSSH before 10.3 mishandles the authorizedkeys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate Authority that makes certain use of comma characters...

golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey

A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority CA. A remote attacker could potentially exploit this by presenting a revoked key, leading t...

K000163318: OpenSSH vulnerability CVE-2026-35414

Security Advisory Description OpenSSH before 10.3 mishandles the authorizedkeys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate Authority that makes certain use of comma characters. CVE-2026-35414 Impact There is no impact; F5 products are not...

Astra Linux – Vulnerability in Consul

HashiCorp Consul and Consul Enterprise 1.10.1’s Raft RPC layer enables non-server agents with a valid certificate signed by the same CA to access server-only functionalities, allowing for privilege escalation. This feature was fixed in versions 1.8.15, 1.9.9, and 1.10.2...

Astra Linux – Vulnerability in OpenSSH

OpenSSH versions prior to 10.3 mishandle the authorizedkeys principals option in unusual scenarios where a principals list is used in conjunction with a Certificate Authority that utilizes comma characters...

Astra Linux – Vulnerability in OpenSSL

Applications that use non-default options when verifying certificates may be vulnerable to attacks from a malicious Certificate Authority CA to circumvent certain checks. Invalid certificate policies in leaf certificates are silently ignored by OpenSSL, and other certificate policy checks for tho...

CVE-2026-76561

A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component. The certificate profile import functionality does not fully validate uploaded profile content beyond the profile ID. An authenticated user with CA Administrator privileges can exploit Dogtag's...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.19.2

cert-manager Operator for Red Hat OpenShift 1.19.2 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

CLEANSTART-2026-SL17084 Security fixes in step-ca 0.27.5-r0

Package step-ca version 0.27.5-r0 fixes 14 vulnerabilities: CVE-2026-33186, CVE-2025-27144, CVE-2026-34986, CVE-2025-22868, CVE-2026-25793...

CVE-2026-15065

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to bypass security restrictions due to the exposure of intermediate certificate authority private keys in a publicly available update file...

CVE-2026-15065 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to bypass security restrictions due to the exposure of intermediate certificate authority private keys in a publicly available update file...

CVE-2026-15065

IBM AIX NIM (versions 7.2, 7.3) and PowerVM VIOS 4.1 expose intermediate CA private keys in publicly available update files (CWE-312), allowing unauthenticated remote attackers to bypass security restrictions. IBM has released Service Packs (SP13/SP5/SP3/SP2) and Fix Packs (4.1.2.20/4.1.1.30/4.1....

Lemur: Server-Side Request Forgery via the ACME client following server-controlled URLs

SummaryThe ACME client used to issue certificates from Let's Encrypt / Google Public CA / private ACME CAs connects to an acmeurl, then issues requests to URLs that the ACME server returns in its directory/order/authorization/finalize responses - this is the classic ACME-client SSRF RFC 8555...

Lemur: Sub-CA creation never checks `AuthorityPermission` on the parent authority

SummaryRepo under test: https://github.com/Netflix/lemurWhen ADMINONLYAUTHORITYCREATION=False an explicitly supported and documented configuration, POST /api/1/authorities with type=subca never verifies that the caller holds AuthorityPermission on the supplied parent authority. The parent field i...

PT-2026-78428

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description Network Installation Management NIM could allow a remote attacker to bypass security restrictions. This issue occurs because intermediate certificate authority private keys...

CVE-2026-71303

creationtimestamp| type| source ---|---|--- 2026-08-18 22:35:14+00:00| published-proof-of-concept| https://github.com/Netflix/lemur/security/advisories/GHSA-v5rc-cpwc-cfpr 2026-08-19 07:31:59+00:00| seen| https://gist.github.com/alon710/048e89a8b6d23388e5627d9e6207e2ad...