CVE-2026-17039

Name of the Vulnerable Software and Affected Versions pki-core (affected versions not specified)

Description A flaw exists in the certificate authority (CA) renewal request path. Unlike the enrollment path, the renewal process fails to perform realm-based authorization checks. This allows an authenticated user with permissions for one realm to trigger the renewal of a certificate belonging to a different realm without the required authorization for that specific realm.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.