CVE-2026-11873Medium· 6.5▾ SunlitAn Apache-proxied Dogtag CA REST endpoint exposed by IdM (POST /ca/rest/certrequests) returns HTTP 500 with internal Java stack traces for unauthenticated malformed requests. The same unauthenticated error path emits large multi-line sta…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.5%
An Apache-proxied Dogtag CA REST endpoint exposed by IdM (POST /ca/rest/certrequests) returns HTTP 500 with internal Java stack traces for unauthenticated malformed requests. The same unauthenticated error path emits large multi-line stack traces into the CA debug log, creating a log-amplification resource exhaustion vector (disk growth and I/O contention) without requiring authentication.
pki-core (all versions)dogtag-pki (all versions)pki-corepki-core (all versions)pki-core (all versions)pki-core (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Make the CA REST API fail safely by checking authentication early and returning simple 4xx errors for malformed requests without stack traces, and tune exception handling and logging so attacker-controlled input cannot spam large stack-trace logs (rate-limit/truncate).
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-123036Medium· 5.5A flaw was found in ansible-core
CVE-2026-12353Medium· 5.3Rhcs: memory leak during https connection leads to denial of service
CVE-2012-0059Medium· 4.9Spacewalk-backend: spacewalk-backend: information disclosure via cleartext passwords in error messages
CVE-2026-120971Medium· 5.3Org.jboss.resteasy/resteasy-core: resteasy: information disclosure through default exception mapper responses
CVE-2026-114348Medium· 5.3webpack-dev-server: webpack-dev-server: Information disclosure via malformed Host header (CVE-2026-114348)
CVE-2026-53682Medium· 5.3An unauthenticated client can query the Security Domain hosts inventory via GET /ca/rest/securityDomain/hosts and receive a structured response enumerating internal PKI/CA hosts and roles (security domain topology and participating subsy…