Certificate Revocation Bypass in OCSP Client from Red Hat
CVE-2026-93578

5.9MEDIUM

Key Information:

Vendor

Red Hat
Status
Red Hat Build Of Apache Camel For Spring Boot 4
Vendor
CVE Published:
18 September 2026

What is CVE-2026-93578?

A vulnerability in the OCSP Client of Red Hat is identified, allowing attackers to bypass certificate revocation checks due to a missing Extended Key Usage (EKU) validation. This oversight can potentially lead to unauthorized access or exploitation of security certificates, raising significant concerns regarding the integrity of secure communications. Proper remediation and updates are essential to mitigate risks associated with this vulnerability.

References

https://access.redhat.com/security/cve/CVE-2026-93578
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2536969
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.