CVE-2026-115221
Last modified
CVE-2026-115221 is a medium-severity vulnerability rated 5.4/10 on the CVSS scale. A flaw was found in FreeIPA. An improper authorization check allows an authenticated host to retrieve and revoke digital certificates assigned to other users or services. EPSS estimates a 0.14% chance of exploitation in the next 30 days.
Description
A flaw was found in FreeIPA. An improper authorization check allows an authenticated host to retrieve and revoke digital certificates assigned to other users or services. This issue occurs because FreeIPA verifies ownership solely by matching the host name to the certificate's subject Common Name (CN), without confirming actual ownership in the directory service. Consequently, an enrolled host can disrupt services by revoking certificates belonging to other entities.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | All versions |
| Red Hat | Red Hat Enterprise Linux 6 | All versions |
| Red Hat | Red Hat Enterprise Linux 7 | All versions |
| Red Hat | Red Hat Enterprise Linux 8 | All versions |
| Red Hat | Red Hat Enterprise Linux 9 | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-115221?
How severe is CVE-2026-115221?
How do I fix CVE-2026-115221?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-11519A security flaw has been discovered in SourceCodester Invent…6.3
- CVE-2026-1152A security vulnerability has been detected in technical-laoh…9.8
- CVE-2026-11520A weakness has been identified in SourceCodester Inventory S…3.5
- CVE-2026-115207A flaw was found in GNU patch. An attacker can achieve arbit…5.5
- CVE-2026-11521A security vulnerability has been detected in Mohammed-eid35…6.3
- CVE-2026-11522A vulnerability was detected in Tenda W20E 15.11.0.6. This v…8.8
- CVE-2026-11523A flaw has been found in Tenda W20E 15.11.0.6. This issue af…8.8
- CVE-2026-11524A vulnerability has been found in Tenda W20E 15.11.0.6. Impa…8.8
- CVE-2026-115246A weakness has been identified in subhajitkhan online-clinic…3.5
- CVE-2026-115247A security vulnerability has been detected in subhajitkhan o…4.3
- CVE-2026-115248A vulnerability was detected in subhajitkhan online-clinic-m…5.4
- CVE-2026-115249A flaw has been found in subhajitkhan online-clinic-manageme…4.6
Are you affected by CVE-2026-115221?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST