Skip to main content
Press slash or control plus K to focus the search. Use the arrow keys to navigate results and press enter to open a threat.
Reconnecting to live updates…
EPSS 0.4%top 68%

Red Hat Security Advisory: mod_md security update

0
High
Published: 01/06/2026 (01/06/2026, 00:47:11 UTC)
Source: GCVE Database
Vendor/Project: Red Hat Product Security
Product: Red Hat

Description

A security vulnerability (CVE-2025-55753) was identified in the mod_md module of the Apache HTTP Server, which is used by Red Hat Enterprise Linux 9.0 to automate certificate provisioning via the ACME protocol. The issue involves unintended retry intervals in mod_md that could affect the management of domain certificates. Red Hat has issued a security advisory (RHSA-2026:0092) addressing this vulnerability with an update for affected Red Hat Enterprise Linux 9.0 variants. The vulnerability is rated as important by Red Hat Product Security, and no CVSS score is currently available.

Affected software

redhat/mod_md
pkg:rpm/redhat/mod_md
Affected versions
=9.0

Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 06/27/2026, 22:24:46 UTC

Technical Analysis

The vulnerability CVE-2025-55753 affects the mod_md module of Apache HTTP Server, which manages domain properties and automates certificate provisioning using the ACME protocol. The security issue relates to unintended retry intervals within mod_md, potentially impacting the automated certificate renewal process. Red Hat has released an update for Red Hat Enterprise Linux 9.0 variants to address this issue as detailed in advisory RHSA-2026:0092. The advisory covers multiple architectures including x86_64, ppc64le, aarch64, and s390x. No known exploits are reported in the wild, and no CVSS score is provided at this time.

Potential Impact

The vulnerability could cause improper handling of retry intervals in the mod_md module, potentially disrupting automated certificate provisioning and renewal for managed domains and virtual hosts. This may lead to delays or failures in certificate renewal, which could affect secure communications relying on these certificates. No direct exploit in the wild has been reported, and the exact impact severity is rated as important by Red Hat.

Mitigation Recommendations

Red Hat has released an official security update for mod_md in Red Hat Enterprise Linux 9.0 to address this vulnerability. Users should apply the update as described in Red Hat advisory RHSA-2026:0092 and the referenced article https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying the vendor-provided update.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Gcve Source
db.gcve.eu
Csaf Category
csaf_security_advisory
Csaf Version
2.0
Publisher
Red Hat Product Security
Advisory Id
RHSA-2026:0092
Cve Count
1
Additional Cves
[]
Cvss Version
null

Threat ID: 6a4049de27e9c797198310df

Added to database: 06/27/2026, 22:08:30 UTC

Last enriched: 06/27/2026, 22:24:46 UTC

Last updated: 06/28/2026, 15:51:09 UTC

Views: 2

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

PRO

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Please log in to the Console to use AI analysis features.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses