Is CVE-2026-18369 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-18369 being exploited in the wild.

How severe is CVE-2026-18369?

Medium severity, with a CVSS score of 5.8, published 30 July 2026.

Which products and versions are affected?

Red Hat Certificate System 9, 10, 11.

Is there a fix for CVE-2026-18369?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-18369 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-18369?

Check whether you run Red Hat Certificate System at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-18369: Dogtag PKI SSRF in ACME HTTP-01 challenge validator

CVE-2026-18369 · Severity: medium · CVSS 5.8 · Published 2026-07-30

A security vulnerability exists in Dogtag PKI, a system used for managing digital certificates and secure identities. An attacker can trick the server into making unauthorized requests to internal network services that are normally protected from the outside world. In certain configurations, this could allow the attacker to read sensitive information from internal systems, potentially exposing private data or cloud metadata.

Technologies: Red Hat Certificate System. Vendors: Red Hat.

Quick answers

Is CVE-2026-18369 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-18369 being exploited in the wild.
How severe is CVE-2026-18369?: Medium severity, with a CVSS score of 5.8, published 30 July 2026.
Which products and versions are affected?: Red Hat Certificate System 9, 10, 11.
Is there a fix for CVE-2026-18369?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-18369 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-18369?: Check whether you run Red Hat Certificate System at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A Server-Side Request Forgery (SSRF) vulnerability exists in the Dogtag PKI ACME responder's HTTP-01 challenge validator. The flaw is caused by ACMEIdentifierValidator.validateSyntaxDNS() incorrectly accepting IP address literals as valid DNS identifiers and the HTTP01Validator following HTTP redirects without verifying if the target is a public address. An unauthenticated attacker can provide a loopback or internal IP address to force the server to send GET requests to internal endpoints. If the InMemory database backend is used, the full response body from the internal target is returned to the attacker via the ACME challenge error message; with LDAP or PostgreSQL backends, the response is only written to server logs.

Affected products

Dogtag Dogtag PKI All versions using ACME responder
Red Hat Red Hat Certificate System 9, 10, 11
Red Hat Red Hat Enterprise Linux 6, 7, 8, 9, 10

Timeline

2026-07-30: disclosed: Vulnerability reported and published in NVD

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.