Search: CVE-2026-114406

CVE-2026-114406 is a vulnerability in the system certificate authority (CA) store of Red Hat Enterprise Linux 10, where root CA certificates that signed weak intermediate CA certificates issued by the eMudhra certificate authority were included. This flaw allows a man-in-the-middle attacker to issue certificates for arbitrary host names signed by these weak intermediate certificates, which would be trusted by TLS/SSL clients using the system CA store, potentially redirecting clients to malicious sites. Due to limitations in distrusting specific intermediate certificates, Red Hat is removing the affected root CA certificates from the system CA store.