CVE-2026-114406

Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns

State: Published
Severity: 6.8 Medium
Published: Oct 21, 2026
Updated: Oct 30, 2026
Reserved: Oct 21, 2026

Description

The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue certificates for arbitrary host names signed by the weak intermediate CA certificates, which would be considered trusted by a TLS/SSL client using system CA store and cause such clients to connect to malicious sites.

Due to inability to only distrust specific intermediate certificates in all clients using the system CA store, root CA certificates of authorities that signed weak intermediate CA certificates are being removed.

Scores

CVSS	Score	Vector	Source
3.1	6.8 Medium	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N	redhat

Weaknesses

CWE-295 Improper Certificate Validation

Affected Products

Product	Versions
Red Hat Enterprise Linux 10Red Hat	0:2026.2.92_v9.0.319-100.3.el10_2 and laterNot affected
Red Hat Enterprise Linux 10.0 Extended Update SupportRed Hat	0:2026.2.92_v9.0.319-100.3.el10_0 and laterNot affected
Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSIONRed Hat	0:2026.2.92_v9.0.319-60.3.el6_10 and laterNot affected
Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSIONRed Hat	0:3.44.0-15.el6_10 and laterNot affected
Red Hat Enterprise Linux 7 Extended Lifecycle SupportRed Hat	0:2026.2.92_v9.0.319-70.3.el7_9 and laterNot affected
Red Hat Enterprise Linux 8Red Hat	0:2026.2.92_v9.0.319-81.3.el8_10 and laterNot affected
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportRed Hat	0:2026.2.92_v9.0.319-80.3.el8_4 and laterNot affected
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportRed Hat	0:2026.2.92_v9.0.319-80.3.el8_6 and laterNot affected
Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-OnRed Hat	0:2026.2.92_v9.0.319-80.3.el8_6 and laterNot affected
Red Hat Enterprise Linux 8.8 Telecommunications Update ServiceRed Hat	0:2026.2.92_v9.0.319-80.3.el8_8 and laterNot affected
Red Hat Enterprise Linux 8.8 Update Services for SAP SolutionsRed Hat	0:2026.2.92_v9.0.319-80.3.el8_8 and laterNot affected
Red Hat Enterprise Linux 9Red Hat	0:2026.2.92_v9.0.319-90.3.el9_8 and laterNot affected
Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsRed Hat	0:2026.2.92_v9.0.319-90.3.el9_2 and laterNot affected
Red Hat Enterprise Linux 9.4 Update Services for SAP SolutionsRed Hat	0:2026.2.92_v9.0.319-90.3.el9_4 and laterNot affected
Red Hat Enterprise Linux 9.6 Extended Update SupportRed Hat	0:2026.2.92_v9.0.319-90.3.el9_6 and laterNot affected
Red Hat OpenShift Container Platform 4.12Red Hat	412.86.202610250235-0 and laterNot affected
Red Hat OpenShift Container Platform 4.14Red Hat	414.92.202610242240-0 and laterNot affected
Red Hat OpenShift Container Platform 4.16Red Hat	416.94.202610242150-0 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	418.94.202610242013-0 and laterNot affected
Red Hat OpenShift Container Platform 4.19Red Hat	4.19.9.6.202610241701-0 and laterNot affected
Red Hat OpenShift Container Platform 4.20Red Hat	4.20.9.6.202610242033-0 and laterNot affected
Red Hat OpenShift Container Platform 4.21Red Hat	4.21.9.6.202610241345-0 and laterNot affected
Red Hat OpenShift Container Platform 4.22Red Hat	4.22.9.8.202610241758-0 and laterNot affected
Red Hat OpenStack Platform 13.0 - ELSRed Hat	0:1.8.33-2.el7ost and laterNot affected
Red Hat OpenStack Platform 16.2Red Hat	0:1.12.119-4.el8ost and laterNot affected
Red Hat OpenStack Platform 17.1 for RHEL 9Red Hat	0:1.20.68-2.el9ost and laterNot affected
Red Hat OpenStack Services on OpenShift 18.0Red Hat	0:1.27.89-3.el9ost and laterNot affected
agentic cluster security suite 0.2Red Hat	1793102187 and laterNot affected
Red Hat Advanced Cluster Security for Kubernetes 4.10Red Hat	1793184257 and laterNot affected
Red Hat Hardened ImagesRed Hat	2026.2.92_v9.0.319-1.hum1 and laterNot affected
Red Hat OpenShift AI 3.0Red Hat	1793041986 and laterNot affected
Red Hat OpenShift AI 3.0Red Hat	1793041981 and laterNot affected
Red Hat OpenShift AI 3.0Red Hat	1793042072 and laterNot affected
Red Hat OpenShift AI 3.0Red Hat	1793042067 and laterNot affected
Red Hat OpenShift AI 3.0Red Hat	1793041987 and laterNot affected
Red Hat OpenShift AI 3.4Red Hat	1793042006 and laterNot affected
Red Hat OpenShift AI 3.4Red Hat	1793042145 and laterNot affected
Red Hat OpenShift AI 3.4Red Hat	1793042006 and laterNot affected
Red Hat OpenShift AI 3.4Red Hat	1793042011 and laterNot affected
Red Hat OpenShift AI 3.4Red Hat	1793042086 and laterNot affected
Red Hat OpenShift AI 3.4Red Hat	1793042088 and laterNot affected
Red Hat OpenShift AI 3.4Red Hat	1793041995 and laterNot affected
Red Hat OpenShift AI 3.4Red Hat	1793042074 and laterNot affected
Red Hat OpenShift AI 3.4Red Hat	1793042008 and laterNot affected
Red Hat OpenShift AI 3.5Red Hat	1793042010 and laterNot affected
Red Hat OpenShift AI 3.5Red Hat	1793042162 and laterNot affected
Red Hat OpenShift AI 3.5Red Hat	1793042004 and laterNot affected
Red Hat OpenShift AI 3.5Red Hat	1793042092 and laterNot affected
Red Hat OpenShift AI 3.5Red Hat	1793042117 and laterNot affected
Red Hat OpenShift AI 3.5Red Hat	1793042093 and laterNot affected
Red Hat OpenShift AI 3.5Red Hat	1793042114 and laterNot affected
Red Hat OpenShift AI 3.5Red Hat	1793042024 and laterNot affected
Red Hat OpenShift AI 3.5Red Hat	1793042008 and laterNot affected
Red Hat OpenShift Builds 1.8.3Red Hat	1792840135 and laterNot affected
Red Hat OpenShift Builds 1.8.3Red Hat	1792835365 and laterNot affected
Red Hat OpenShift Builds 1.8.3Red Hat	1792835298 and laterNot affected
Red Hat OpenShift Builds 1.8.3Red Hat	1792836805 and laterNot affected
Red Hat OpenShift Builds 1.8.3Red Hat	1792844269 and laterNot affected
Red Hat OpenShift Builds 1.8.3Red Hat	1792837466 and laterNot affected
Red Hat OpenShift Builds 1.8.3Red Hat	1792838794 and laterNot affected
Red Hat OpenShift Builds 1.8.3Red Hat	1792837567 and laterNot affected
Red Hat OpenShift Builds 1.8.3Red Hat	1792851895 and laterNot affected
Red Hat OpenShift Builds 1.9.2Red Hat	1792837598 and laterNot affected
Red Hat OpenShift Builds 1.9.2Red Hat	1792837398 and laterNot affected
Red Hat OpenShift Builds 1.9.2Red Hat	1792838765 and laterNot affected
Red Hat OpenShift Builds 1.9.2Red Hat	1792835879 and laterNot affected
Red Hat OpenShift Builds 1.9.2Red Hat	1792859629 and laterNot affected
Red Hat OpenShift Builds 1.9.2Red Hat	1792857112 and laterNot affected
Red Hat OpenShift Builds 1.9.2Red Hat	1792840655 and laterNot affected
Red Hat OpenShift Builds 1.9.2Red Hat	1792839475 and laterNot affected
Red Hat OpenShift Builds 1.9.2Red Hat	1792835571 and laterNot affected
Red Hat OpenShift Dev Spaces 3.31Red Hat	1793043152 and laterNot affected
Red Hat OpenShift Dev Spaces 3.31Red Hat	1793055196 and laterNot affected
Red Hat OpenShift Dev Spaces 3.31Red Hat	1793053893 and laterNot affected
Red Hat OpenShift Dev Spaces 3.31Red Hat	1793033767 and laterNot affected
Red Hat OpenShift Dev Spaces 3.31Red Hat	1793040801 and laterNot affected
Red Hat OpenShift Dev Spaces 3.31Red Hat	1793033165 and laterNot affected
Red Hat OpenShift Dev Spaces 3.31Red Hat	1793036189 and laterNot affected
Red Hat OpenShift Dev Spaces 3.31Red Hat	1793036500 and laterNot affected
Red Hat OpenShift Dev Spaces 3.31Red Hat	1793037970 and laterNot affected
Red Hat OpenShift Dev Spaces 3.31Red Hat	1793034989 and laterNot affected
Red Hat OpenShift Dev Spaces 3.31Red Hat	1793038501 and laterNot affected
Red Hat OpenShift Dev Spaces 3.31Red Hat	1793050419 and laterNot affected
Red Hat OpenShift Dev Spaces 3.31Red Hat	1793041480 and laterNot affected
Red Hat OpenShift Dev Spaces 3.31Red Hat	1793033496 and laterNot affected
Red Hat OpenShift Dev Spaces 3.31Red Hat	1793041345 and laterNot affected
Red Hat OpenShift Dev Spaces 3.31Red Hat	1793120195 and laterNot affected
Red Hat Update Infrastructure 5Red Hat	1793005771 and laterNot affected
Red Hat Update Infrastructure 5Red Hat	1793005764 and laterNot affected
Red Hat Update Infrastructure 5Red Hat	1793004999 and laterNot affected
Red Hat Update Infrastructure 5Red Hat	1793004989 and laterNot affected
Red Hat Update Infrastructure 5Red Hat	1793005812 and laterNot affected
Red Hat AI Inference ServerRed Hat
Red Hat AI Inference ServerRed Hat
Red Hat AI Inference ServerRed Hat
Red Hat AI Inference ServerRed Hat
Red Hat AI Inference ServerRed Hat
Red Hat AI Inference ServerRed Hat
Red Hat AI Inference ServerRed Hat
Red Hat AI Inference ServerRed Hat
Red Hat AI Inference ServerRed Hat
Red Hat AI Inference ServerRed Hat
Red Hat AI Inference ServerRed Hat
Red Hat AI Inference ServerRed Hat
Red Hat AI Inference ServerRed Hat
Red Hat AI Inference ServerRed Hat
Red Hat AI Inference ServerRed Hat
Red Hat AI Inference ServerRed Hat
Red Hat AI Inference ServerRed Hat
Red Hat Enterprise Linux AI (RHEL AI) 3Red Hat
Red Hat Enterprise Linux AI (RHEL AI) 3Red Hat
Red Hat Enterprise Linux AI (RHEL AI) 3Red Hat
Red Hat Enterprise Linux AI (RHEL AI) 3Red Hat
Red Hat Enterprise Linux AI (RHEL AI) 3Red Hat
Red Hat Enterprise Linux AI (RHEL AI) 3Red Hat
Red Hat Enterprise Linux AI (RHEL AI) 3Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift AI (RHOAI)Red Hat
Red Hat OpenShift Container Platform 5Red Hat
Red Hat OpenShift GitOpsRed Hat
Red Hat OpenShift GitOpsRed Hat
Red Hat OpenShift GitOpsRed Hat
Red Hat OpenShift GitOpsRed Hat
Red Hat OpenShift GitOpsRed Hat
Red Hat OpenShift GitOpsRed Hat
Red Hat OpenShift GitOpsRed Hat
Red Hat OpenShift GitOpsRed Hat

References

RHSA-2026:86595vendor-advisory
RHSA-2026:88455vendor-advisory
RHSA-2026:88459vendor-advisory
RHSA-2026:88550vendor-advisory
RHSA-2026:88560vendor-advisory
RHSA-2026:88562vendor-advisory
RHSA-2026:88563vendor-advisory
RHSA-2026:88564vendor-advisory
RHSA-2026:88662vendor-advisory
RHSA-2026:88668vendor-advisory
RHSA-2026:88669vendor-advisory
RHSA-2026:88779vendor-advisory
RHSA-2026:89081vendor-advisory
RHSA-2026:89131vendor-advisory
RHSA-2026:89197vendor-advisory
RHSA-2026:89232vendor-advisory
RHSA-2026:89333vendor-advisory
RHSA-2026:89651vendor-advisory
RHSA-2026:89714vendor-advisory
RHSA-2026:89725vendor-advisory
RHSA-2026:89838vendor-advisory
RHSA-2026:89907vendor-advisory
RHSA-2026:90272vendor-advisory
RHSA-2026:90969vendor-advisory
RHSA-2026:90985vendor-advisory
RHSA-2026:91202vendor-advisory
RHSA-2026:91204vendor-advisory
RHSA-2026:91206vendor-advisory
RHSA-2026:91207vendor-advisory
RHSA-2026:91217vendor-advisory
RHSA-2026:91218vendor-advisory
RHSA-2026:91219vendor-advisory
RHSA-2026:91224vendor-advisory
RHSA-2026:91232vendor-advisory
RHSA-2026:91233vendor-advisory
RHSA-2026:91234vendor-advisory
RHSA-2026:91235vendor-advisory
RHSA-2026:91236vendor-advisory
RHSA-2026:91237vendor-advisory
RHSA-2026:91238vendor-advisory
RHSA-2026:91241vendor-advisory
RHSA-2026:91242vendor-advisory
RHSA-2026:91243vendor-advisory
RHSA-2026:91244vendor-advisory
RHSA-2026:91245vendor-advisory
RHSA-2026:91246vendor-advisory
RHSA-2026:91248vendor-advisory
RHSA-2026:91249vendor-advisory
RHSA-2026:91997vendor-advisory
RHSA-2026:92006vendor-advisory
RHSA-2026:92342vendor-advisory
RHSA-2026:93043vendor-advisory
RHSA-2026:93044vendor-advisory
RHSA-2026:93045vendor-advisory
RHSA-2026:93046vendor-advisory
https://access.redhat.com/security/cve/CVE-2026-114406vdb-entry
RHSB-2026-012technical-description
RHBZ#2556046issue-tracking

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.