Log Amplification Vulnerability in Dogtag CA REST Endpoint by Red Hat
CVE-2026-11873

6.5MEDIUM

Key Information:

Vendor

Red Hat
Status
Red Hat Certificate System 9
Red Hat Enterprise Linux 10
Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 7
Vendor
CVE Published:
1 September 2026

What is CVE-2026-11873?

The Dogtag Certificate Authority (CA) system contains a vulnerability in its REST endpoint that can be exploited through unauthenticated malformed requests. Specifically, when an incorrect request is made to the Dogtag CA's REST endpoint, it returns an HTTP 500 error along with internal Java stack traces. These error messages can fill debug logs with extensive multi-line stack traces, potentially leading to disk growth and I/O contention as the log files accumulate, resulting in a resource exhaustion scenario. This issue highlights the importance of securing endpoints against such unauthorized access paths to prevent potential disruptions in service.

References

https://access.redhat.com/security/cve/CVE-2026-11873
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2487505
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.