Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 271/271 feeds/APIs · 464/464 docs · 7/9 advisories · checked 16:23 UTC Customize Public modeDiscuss ChangeIntel on Discord
Advisory catalogCVE-2026-114406

Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns

Exact source revision recorded 23 Oct 2026 15:48:27 UTC. It does not establish the source's current position. Latest evidence.

cve-program · CVE-2026-114406

Published

ca-certificates

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 10",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "ca-certificates",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:2026.2.92_v9.0.319-100.3.el10_2",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/o:redhat:enterprise_linux:10.2"
                    ]
                }

ca-certificates

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 9",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "ca-certificates",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:2026.2.92_v9.0.319-90.3.el9_8",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/o:redhat:enterprise_linux:9::baseos"
                    ]
                }

ca-certificates-main

https://catalog.redhat.com/software/containers/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat Hardened Images",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "ca-certificates-main",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "2026.2.92_v9.0.319-1.hum1",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:hummingbird:1"
                    ]
                }

assisted/agent-preinstall-image-builder-rhel9

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "assisted/agent-preinstall-image-builder-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:assisted_installer:2"
                    ]
                }

cert-manager/cert-manager-istio-csr-rhel9

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "cert-manager Operator for Red Hat OpenShift",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "cert-manager/cert-manager-istio-csr-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:cert_manager:1"
                    ]
                }

agent-sandbox/agent-sandbox-rhel9-operator

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Confidential Compute Attestation",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "agent-sandbox/agent-sandbox-rhel9-operator",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:confidential_compute_attestation:1"
                    ]
                }

kmm/kernel-module-management-hub-rhel9-operator

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Kernel Module Management Operator for Red Hat Openshift",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "kmm/kernel-module-management-hub-rhel9-operator",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:kernel_module_management:2"
                    ]
                }

kube-descheduler-operator/descheduler-rhel9

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Kube Descheduler Operator",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "kube-descheduler-operator/descheduler-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:kube_descheduler_operator:5"
                    ]
                }

openshift-logging/cluster-logging-rhel9-operator

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Logging Subsystem for Red Hat OpenShift",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "openshift-logging/cluster-logging-rhel9-operator",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:logging:6"
                    ]
                }

lvms4/lvms-must-gather-rhel8

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Logical Volume Manager Storage",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "lvms4/lvms-must-gather-rhel8",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:lvms:4"
                    ]
                }

lvms4/lvms-must-gather-rhel9

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Logical Volume Manager Storage",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "lvms4/lvms-must-gather-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:lvms:4"
                    ]
                }

ca-certificates

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Logical Volume Manager Storage",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "ca-certificates",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:lvms:5"
                    ]
                }

mta/mta-analyzer-addon-rhel9

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Migration Toolkit for Applications 8",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "mta/mta-analyzer-addon-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:migration_toolkit_applications:8"
                    ]
                }

rhmtc/openshift-migration-controller-rhel8

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Migration Toolkit for Containers",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "rhmtc/openshift-migration-controller-rhel8",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:rhmt:1"
                    ]
                }

migration-toolkit-virtualization/mtv-api-rhel9

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Migration Toolkit for Virtualization",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "migration-toolkit-virtualization/mtv-api-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:migration_toolkit_virtualization:2"
                    ]
                }

multicluster-engine/addon-manager-rhel9

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Multicluster Engine for Kubernetes",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "multicluster-engine/addon-manager-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:multicluster_engine"
                    ]
                }

network-observability/network-observability-cli-rhel9

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Network Observability Operator",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "network-observability/network-observability-cli-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:network_observ_optr:1"
                    ]
                }

openshift-serverless-1/kn-backstage-plugins-eventmesh-rhel9

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "OpenShift Serverless",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "openshift-serverless-1/kn-backstage-plugins-eventmesh-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:serverless:1"
                    ]
                }

openshift-serverless-1/logic-data-index-ephemeral-rhel9

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "OpenShift Serverless",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "openshift-serverless-1/logic-data-index-ephemeral-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:serverless:1"
                    ]
                }

openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "OpenShift Service Mesh 3",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:service_mesh:3"
                    ]
                }

openshift-service-mesh/istio-cni-rhel9

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "OpenShift Service Mesh 3",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "openshift-service-mesh/istio-cni-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:service_mesh:3"
                    ]
                }

openshift-service-mesh-tech-preview/istio-ztunnel-rhel9

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "OpenShift Service Mesh 3",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "openshift-service-mesh-tech-preview/istio-ztunnel-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:service_mesh:3"
                    ]
                }

rhacm2/acm-cli-rhel9

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "rhacm2/acm-cli-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:acm:2"
                    ]
                }

rhacm2/acm-cluster-permission-rhel9

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "rhacm2/acm-cluster-permission-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:acm:2"
                    ]
                }

advanced-cluster-security/rhacs-central-db-rhel8

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat Advanced Cluster Security 4",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "advanced-cluster-security/rhacs-central-db-rhel8",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:advanced_cluster_security:4"
                    ]
                }

advanced-cluster-security/rhacs-central-db-rhel9

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat Advanced Cluster Security 4",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "advanced-cluster-security/rhacs-central-db-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:advanced_cluster_security:4"
                    ]
                }

ca-certificates

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat Connectivity Link 1",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "ca-certificates",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:connectivity_link:1"
                    ]
                }

rhcl-1/authorino-rhel9

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat Connectivity Link 1",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "rhcl-1/authorino-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:connectivity_link:1"
                    ]
                }

ca-certificates

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 6",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "ca-certificates",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/o:redhat:enterprise_linux:6"
                    ]
                }

ca-certificates

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 7",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "ca-certificates",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/o:redhat:enterprise_linux:7"
                    ]
                }

ca-certificates

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "ca-certificates",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/o:redhat:enterprise_linux:8"
                    ]
                }

openshift/ose-rhel-coreos-8

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "openshift/ose-rhel-coreos-8",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:openshift:4"
                    ]
                }

openshift/ose-rhel-coreos-9

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "openshift/ose-rhel-coreos-9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:openshift:4"
                    ]
                }

rhosdt/opentelemetry-collector-rhel9

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift distributed tracing 3",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "rhosdt/opentelemetry-collector-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:openshift_distributed_tracing:3"
                    ]
                }

ca-certificates

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift for Windows Containers",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "ca-certificates",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:windows_machine_config"
                    ]
                }

openshift4-wincw/windows-machine-config-rhel9-operator

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift for Windows Containers",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "openshift4-wincw/windows-machine-config-rhel9-operator",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:windows_machine_config"
                    ]
                }

container-native-virtualization/aaq-controller-rhel9

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Virtualization 4",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "container-native-virtualization/aaq-controller-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:container_native_virtualization:4"
                    ]
                }

ca-certificates

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Virtualization 5",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "ca-certificates",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:container_native_virtualization:5"
                    ]
                }

quay/clair-rhel8

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat Quay 3",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "quay/clair-rhel8",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:quay:3"
                    ]
                }

quay/clair-rhel9

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat Quay 3",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "quay/clair-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:quay:3"
                    ]
                }

mosquitto

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "Red Hat",
                    "product": "Red Hat Satellite 6",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "mosquitto",
                    "defaultStatus": "unaffected",
                    "cpes": [
                        "cpe:/a:redhat:satellite:6"
                    ]
                }
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 24 Oct 16:23 UTC · 271 of 271 readable · 269 fully read · documentation 464/464 current