CVE-2026-18047

Dogtag PKI’s ACME responder is affected. The vulnerability stems from web.xml security constraints using exact URL pattern matching for admin-only enable/disable endpoints; appending a trailing slash lets an unauthenticated user bypass Tomcat authentication while RESTEasy routes the request, enab...