Strix
65.1K

CVE-2026-18047

MEDIUMCVSS 6.5/10

Last modified

CVE-2026-18047 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. A flaw was found in Dogtag PKI's ACME responder where the web.xml security constraints use exact URL pattern matching for admin-only enable/disable endpoints. By appending a trailing slash to the URL, an unauthenticated attacker can bypass the Tomcat authentication constraint while RESTEasy still routes the request to the handler, allowing unauthorized toggling of the ACME service state including persistent denial of service..

Description

A flaw was found in Dogtag PKI's ACME responder where the web.xml security constraints use exact URL pattern matching for admin-only enable/disable endpoints. By appending a trailing slash to the URL, an unauthenticated attacker can bypass the Tomcat authentication constraint while RESTEasy still routes the request to the handler, allowing unauthorized toggling of the ACME service state including persistent denial of service.

Metrics

CVSS 3.1
6.5/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Weakness Enumeration

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
Red HatRed Hat Certificate System 10All versions
Red HatRed Hat Certificate System 11All versions
Red HatRed Hat Certificate System 9All versions
Red HatRed Hat Enterprise Linux 10All versions
Red HatRed Hat Enterprise Linux 6All versions
Red HatRed Hat Enterprise Linux 7All versions
Red HatRed Hat Enterprise Linux 8All versions
Red HatRed Hat Enterprise Linux 9All versions

References

Timeline

Published
Last Modified
Status
Awaiting Analysis

Frequently Asked Questions

What is CVE-2026-18047?
A flaw was found in Dogtag PKI's ACME responder where the web.xml security constraints use exact URL pattern matching for admin-only enable/disable endpoints. By appending a trailing slash to the URL, an unauthenticated attacker can bypass the Tomcat authentication constraint while RESTEasy still routes the request to the handler, allowing unauthorized toggling of the ACME service state including persistent denial of service.
How severe is CVE-2026-18047?
CVE-2026-18047 has a CVSS score of 6.5/10 (MEDIUM severity).
How do I fix CVE-2026-18047?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-18047?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST