Is CVE-2026-17039 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-17039?

CVE-2026-17039 has a CVSS v3 severity of LOW (3.1).

Back

CVE-2026-17039

Description

A flaw was found in pki-core. The certificate authority (CA) renewal request path does not perform the realm-based authorization check that the enrollment path performs, allowing an authenticated user entitled to one realm to cause a certificate belonging to a different realm to be renewed without that realm's authorization.