Multiple vulnerabilities in Red Hat Enterprise Linux pki-core allowing Cross-Site Scripting and security bypass

72% confidence

Description

Multiple vulnerabilities in Red Hat Enterprise Linux pki-core can be exploited by a remote, anonymous or authenticated attacker to perform Cross-Site Scripting attacks or bypass security measures.

Affected Products

Vendor	Product	Versions
red hat	enterprise linux pki-core	—

Related News (1 articles)

Tier B

BSI Advisories3h ago

[UPDATE] [hoch] Red Hat Enterprise Linux pki-core: Mehrere Schwachstellen

→ No new info (linked only)

CISA KEV❌ No

Actively exploited❌ No

CWECWE-79

PublishedApr 9, 2026

Last enriched3h ago

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

HIGHCVE-2026-34045EXP

Podman Desktop WebView Server Exposed

Trending: 66

HIGHCVE-2026-4634EXP

Keycloak: keycloak: denial of service via excessive processing of openid connect scope parameters

Trending: 52

HIGHCVE-2026-4636EXP

Keycloak: keycloak: uma policy bypass allows authenticated users to gain unauthorized access to victim-owned resources.

Trending: 50

NONECVE-2026-4282EXP

Keycloak: keycloak: privilege escalation via forged authorization codes due to singleuseobjectprovider isolation flaw

Trending: 43

NONECVE-2026-3872EXP

Keycloak: keycloak: information disclosure due to redirect_uri validation bypass

Trending: 43

Pin to Dashboard

Verification

State: reported

Confidence: 72%

Vulnerability Timeline

CVE Published

Apr 9, 2026

Discovered by ZDM

Apr 9, 2026