Man-in-the-Middle Vulnerability in Red Hat CA Certificates Impacting Trusted Connections

CVE-2026-114406

What is CVE-2026-114406?

The Red Hat CA certificate system, containing multiple root CA certificates, has been compromised due to the presence of weak intermediate CA certificates issued by the eMudhra authority. Attackers can exploit this vulnerability to perform man-in-the-middle attacks, allowing them to issue fraudulent certificates for arbitrary hostnames. This could lead to unauthorized access and interactions with clients using the system CA store, which would mistakenly deem these forged certificates as trustworthy. To mitigate this risk, Red Hat is removing root CA certificates that are associated with these weak intermediates, enhancing the security of the CA store and protecting users from potential malicious sites.

References