目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

CVE-2026-114406— Ca-certificates 中间证书不信任漏洞

一分钟漏洞结论

影响对象
Red Hat Red Hat Hardened Images
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。

通过 RPM 包分发的 Red Hat 产品系统证书颁发机构（CA）存储中，包含了多个根 CA 证书，这些根 CA 曾为 eMudhra 证书颁发机构签发的、使用弱私钥的中间 CA 证书进行签名。中间人攻击者可利用此漏洞，使用这些弱中间 CA 证书为任意主机名签发证书；由于这些证书会被使用系统 CA 存储的 TLS/SSL 客户端视为可信，从而诱导客户端连接到恶意网站。 由于无法在所有使用系统 CA 存储的客户端中仅对特定中间证书实施不信任策略，因此正在移除那些曾为弱中间 CA 证书签名的根 CA 证书。

CVSS 6.8 · Medium
获取后续新漏洞提醒 登录后订阅

一、 漏洞 CVE-2026-114406 基础信息

漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗

尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。

Vulnerability Title
Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns
来源: CVE Program / CVE List V5
Vulnerability Description
The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue certificates for arbitrary host names signed by the weak intermediate CA certificates, which would be considered trusted by a TLS/SSL client using system CA store and cause such clients to connect to malicious sites. Due to inability to only distrust specific intermediate certificates in all clients using the system CA store, root CA certificates of authorities that signed weak intermediate CA certificates are being removed.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
来源: CVE Program / CVE List V5
Vulnerability Type
证书验证不恰当
来源: CVE Program / CVE List V5

受影响产品

厂商 产品 影响版本 CPE 订阅
Red Hat Red Hat Hardened Images 2026.2.92_v9.0.319-1.hum1 ~ * cpe:/a:redhat:hummingbird:1
Red Hat Assisted Installer for Red Hat OpenShift Container Platform 2 - cpe:/a:redhat:assisted_installer:2
Red Hat cert-manager Operator for Red Hat OpenShift - cpe:/a:redhat:cert_manager:1
Red Hat Confidential Compute Attestation - cpe:/a:redhat:confidential_compute_attestation:1
Red Hat Kernel Module Management Operator for Red Hat Openshift - cpe:/a:redhat:kernel_module_management:2
Red Hat Kube Descheduler Operator - cpe:/a:redhat:kube_descheduler_operator:5
Red Hat Logging Subsystem for Red Hat OpenShift - cpe:/a:redhat:logging:6
Red Hat Logical Volume Manager Storage - cpe:/a:redhat:lvms:4
Red Hat Logical Volume Manager Storage - cpe:/a:redhat:lvms:4
Red Hat Logical Volume Manager Storage - cpe:/a:redhat:lvms:5
Red Hat Migration Toolkit for Applications 8 - cpe:/a:redhat:migration_toolkit_applications:8
Red Hat Migration Toolkit for Containers - cpe:/a:redhat:rhmt:1
Red Hat Migration Toolkit for Virtualization - cpe:/a:redhat:migration_toolkit_virtualization:2
Red Hat Multicluster Engine for Kubernetes - cpe:/a:redhat:multicluster_engine
Red Hat Network Observability Operator - cpe:/a:redhat:network_observ_optr:1
Red Hat OpenShift Serverless - cpe:/a:redhat:serverless:1
Red Hat OpenShift Serverless - cpe:/a:redhat:serverless:1
Red Hat OpenShift Service Mesh 3 - cpe:/a:redhat:service_mesh:3
Red Hat OpenShift Service Mesh 3 - cpe:/a:redhat:service_mesh:3
Red Hat OpenShift Service Mesh 3 - cpe:/a:redhat:service_mesh:3
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 - cpe:/a:redhat:acm:2
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 - cpe:/a:redhat:acm:2
Red Hat Red Hat Advanced Cluster Security 4 - cpe:/a:redhat:advanced_cluster_security:4
Red Hat Red Hat Advanced Cluster Security 4 - cpe:/a:redhat:advanced_cluster_security:4
Red Hat Red Hat Connectivity Link 1 - cpe:/a:redhat:connectivity_link:1
Red Hat Red Hat Connectivity Link 1 - cpe:/a:redhat:connectivity_link:1
Red Hat Red Hat Enterprise Linux 10 - cpe:/o:redhat:enterprise_linux:10
Red Hat Red Hat Enterprise Linux 6 - cpe:/o:redhat:enterprise_linux:6
Red Hat Red Hat Enterprise Linux 7 - cpe:/o:redhat:enterprise_linux:7
Red Hat Red Hat Enterprise Linux 8 - cpe:/o:redhat:enterprise_linux:8

二、漏洞 CVE-2026-114406 的公开POC

# POC 描述 源链接 神龙链接
AI 生成 POC 高级

未找到公开 POC。

登录以生成 AI POC

三、漏洞 CVE-2026-114406 的情报信息

请登录查看更多情报信息。

CVE-2026-114406 厂商安全公告 (3)

CVE-2026-114406 其他参考 (1)

同批安全公告 · Red Hat · 2026-10-21 · 共 11 条

CVE-2026-110744 7.2 HIGH Multicluster-global-hub 越权冒充漏洞
CVE-2026-17557 6.5 MEDIUM Lm-evaluation-harness SSRF 漏洞
CVE-2026-92824 6.2 MEDIUM libmodulemd 越界读取漏洞
CVE-2026-92822 6.2 MEDIUM Libmodulemd 解析嵌套 xmd yaml 时无限递归漏洞
CVE-2026-92823 6.2 MEDIUM Libmodulemd 压缩 YAML 解析拒绝服务漏洞
CVE-2026-85518 6.1 MEDIUM OpenSCAP 任意文件写入漏洞
CVE-2026-114038 5.1 MEDIUM device-mapper-multipath 信息泄露漏洞
CVE-2026-114438 4.2 MEDIUM Keycloak 身份验证绕过漏洞
CVE-2026-114370 3.7 LOW Undertow PathResourceManager 安全路径检查目录遍历漏洞
CVE-2026-114236 3.3 LOW Podman 存储层处理畸形层时资源泄漏漏洞

IV. Related Vulnerabilities

Same product: Red Hat Hardened Images
Same vendor: Red Hat
Same weakness: CWE-295

V. Comments for CVE-2026-114406

暂无评论

发表评论