Search: CVE-2026-76561

CVE-2026-76561 is a high-severity vulnerability in Dogtag PKI, part of FreeIPA's certificate authority component in Red Hat Enterprise Linux 10. The certificate profile import functionality does not fully validate uploaded profile content beyond the profile ID, allowing an authenticated user with CA Administrator privileges to execute arbitrary commands via the ExternalProcessConstraint mechanism. This results in code execution as the pkiuser account. A security update is available to address this issue.