CVE-2026-53682

MediumCVSS 5.3

Published: 01/09/2026(UTC)Updated: 05/11/2026(UTC)Translated: 01/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

11th percentile - higher than 11% of all known CVEs

Summary

An unauthenticated client can query the Security Domain hosts inventory via GET /ca/rest/securityDomain/hosts and receive a structured response enumerating internal PKI/CA hosts and roles, without requiring a principal, client certificate, or session.

Risk Assessment

Disclosure of internal PKI/CA topology may aid an attacker in planning further attacks against critical system components.

Recommendation

Restrict access to this endpoint to authenticated and authorized clients only, and consider adding authentication and authorization mechanisms at the API level.

Other vulnerabilities in Dogtag CA

CVE-2026-11873Medium
An Apache-proxied Dogtag CA REST endpoint exposed by IdM (POST /ca/rest/certrequests) returns HTTP 500 with internal Java stack traces for unauthenticated malformed requests. The same unauthenticated error path emits large multi-line stack traces into the CA debug log, creating a log-amplification resource exhaustion vector (disk growth and I/O contention) without requiring authentication.

Original NVD description (English source)

An unauthenticated client can query the Security Domain hosts inventory via GET /ca/rest/securityDomain/hosts and receive a structured response enumerating internal PKI/CA hosts and roles (security domain topology and participating subsystems), without requiring a principal, client certificate, or session.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS