CVE-2026-11873

Name of the Vulnerable Software and Affected Versions Dogtag CA (affected versions not specified)

Description An Apache-proxied Dogtag CA REST endpoint exposed by IdM returns HTTP 500 errors containing internal Java stack traces when receiving unauthenticated malformed requests. This issue occurs at the 'POST /ca/rest/certrequests' endpoint. Additionally, the same unauthenticated error path generates extensive multi-line stack traces within the CA debug log, which can lead to resource exhaustion through log-amplification, resulting in disk growth and I/O contention.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.