CVE-2026-18369

Name of the Vulnerable Software and Affected Versions Dogtag PKI (affected versions not specified)

Description A flaw in the ACME responder allows the HTTP-01 challenge validator to accept IP address literals as DNS identifiers and follow HTTP redirects without verifying if the target is a public address. An unauthenticated ACME account holder can use this to perform Server-Side Request Forgery (SSRF), which is a technique that forces a server to make requests to an unintended location, causing the Dogtag server to send HTTP GET requests to internal network services. When using the InMemory database backend, the response body of these internal targets is disclosed to the attacker via the ACME challenge error.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.