The vulnerability identified as CVE-2026-54513 in the jackson-databind component of the Public Key Infrastructure (PKI) Core allows a security bypass that can lead to arbitrary code execution. This affects the pki-deps:10.6 module used by Red Hat Certificate System in Red Hat Enterprise Linux 8. Red Hat has issued an Important security advisory (RHSA-2026:43218) and released updated packages to fix this issue. The advisory covers multiple architectures and variants of Red Hat Enterprise Linux 8, including Extended Life Cycle versions. The update mitigates the vulnerability by patching the jackson-databind component to prevent exploitation.

Successful exploitation of this vulnerability could allow an attacker to bypass security controls and execute arbitrary code on affected systems. This poses a significant risk to the integrity and security of systems running the vulnerable packages, particularly those relying on Red Hat Certificate System components. The severity is rated as Important by Red Hat, indicating a high impact but not critical.

Red Hat has released an official security update for the pki-deps:10.6 module in Red Hat Enterprise Linux 8 that addresses CVE-2026-54513. Users should apply the update as described in the Red Hat advisory (RHSA-2026:43218) and follow the instructions in https://access.redhat.com/articles/11258 to remediate the vulnerability. No additional mitigation steps are indicated beyond applying the official patch.