Search: CVE-2026-7383

A security advisory from Red Hat addresses multiple vulnerabilities in Red Hat Hardened Images RPMs, including CVE-2026-42769. This particular flaw involves the Certificate Management Protocol (CMP) implementation in OpenSSL, where an attacker with valid Registration Authority (RA) credentials could exploit a certificate verification error during a Root CA key update to substitute the root CA certificate with a fraudulent one. The impact is limited by the requirement that the attacker already has RA-level credentials. No FIPS modules are affected. The advisory provides updated RPM packages for rust-bootupd to address these issues.