# CVE-2026-80110: idm-pki-acme: The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System

CVE-2026-80110 is fixed in 10 products on 1 platform, first by ALSA-2026:73765, released September 30, 2026. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2026-80110
- Priority: High
- CVSS: 8.1 (important)
- EPSS: 0.0021
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Sep 15, 2026

## Description

The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System.    Security Fix(es):      * pki-core: Dogtag/PKI: certprofile-import allows code execution via unsanitized profile content (ExternalProcessConstraint) (CVE-2026-76561)   * pki-core: Dogtag PKI v2 REST ACL filter's reverse-lexicographic tie-break lets a CA Agent invoke the admin-only raw profile creation endpoint (CVE-2026-80110)   For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | dogtag-pki RHEL 10 | 11.6.0-3.el10_0.1 | [RHSA-2026:86621](https://patchblox.com/security/data/fix/linux/rhsa-2026-86621.md) | Oct 1, 2026 |
| Linux | dogtag-pki rocky 10 | 0:11.9.0-5.el10_2.rocky.0.1 | [RLSA-2026:73765](https://patchblox.com/security/data/fix/linux/rlsa-2026-73765.md) | Oct 1, 2026 |
| Linux | idm-pki-acme RHEL 9 | 0:11.7.1-2.el9_8 | [RHSA-2026:73766](https://patchblox.com/security/data/fix/linux/rhsa-2026-73766.md) | Sep 30, 2026 |
| Linux | idm-pki-acme almalinux 10 | 11.9.0-5.el10_2.alma.1 | [ALSA-2026:73765](https://patchblox.com/security/data/fix/linux/alsa-2026-73765.md) | Sep 30, 2026 |
| Linux | idm-pki-acme almalinux 9 | 11.7.1-2.el9_8 | [ALSA-2026:73766](https://patchblox.com/security/data/fix/linux/alsa-2026-73766.md) | Sep 30, 2026 |
| Linux | idm-pki-acme ol 10 | 0:11.9.0-5.0.1.el10_2 | [ELSA-2026-73765](https://patchblox.com/security/data/fix/linux/elsa-2026-73765.md) | Sep 30, 2026 |
| Linux | idm-pki-acme ol 9 | 0:11.7.1-2.0.1.el9_8 | [ELSA-2026-73766](https://patchblox.com/security/data/fix/linux/elsa-2026-73766.md) | Sep 30, 2026 |
| Linux | idm-pki-base RHEL 9 | 0:11.7.1-2.el9_8 | [RHSA-2026:73766](https://patchblox.com/security/data/fix/linux/rhsa-2026-73766.md) | Sep 30, 2026 |
| Linux | idm-pki-base almalinux 10 | 11.9.0-5.el10_2.alma.1 | [ALSA-2026:73765](https://patchblox.com/security/data/fix/linux/alsa-2026-73765.md) | Sep 30, 2026 |
| Linux | idm-pki-base almalinux 9 | 11.7.1-2.el9_8 | [ALSA-2026:73766](https://patchblox.com/security/data/fix/linux/alsa-2026-73766.md) | Sep 30, 2026 |
| Linux | idm-pki-base ol 10 | 0:11.9.0-5.0.1.el10_2 | [ELSA-2026-73765](https://patchblox.com/security/data/fix/linux/elsa-2026-73765.md) | Sep 30, 2026 |
| Linux | idm-pki-base ol 9 | 0:11.7.1-2.0.1.el9_8 | [ELSA-2026-73766](https://patchblox.com/security/data/fix/linux/elsa-2026-73766.md) | Sep 30, 2026 |
| Linux | idm-pki-ca RHEL 9 | 0:11.7.1-2.el9_8 | [RHSA-2026:73766](https://patchblox.com/security/data/fix/linux/rhsa-2026-73766.md) | Sep 30, 2026 |
| Linux | idm-pki-ca almalinux 10 | 11.9.0-5.el10_2.alma.1 | [ALSA-2026:73765](https://patchblox.com/security/data/fix/linux/alsa-2026-73765.md) | Sep 30, 2026 |
| Linux | idm-pki-ca almalinux 9 | 11.7.1-2.el9_8 | [ALSA-2026:73766](https://patchblox.com/security/data/fix/linux/alsa-2026-73766.md) | Sep 30, 2026 |
| Linux | idm-pki-ca ol 10 | 0:11.9.0-5.0.1.el10_2 | [ELSA-2026-73765](https://patchblox.com/security/data/fix/linux/elsa-2026-73765.md) | Sep 30, 2026 |
| Linux | idm-pki-ca ol 9 | 0:11.7.1-2.0.1.el9_8 | [ELSA-2026-73766](https://patchblox.com/security/data/fix/linux/elsa-2026-73766.md) | Sep 30, 2026 |
| Linux | idm-pki-java RHEL 9 | 0:11.7.1-2.el9_8 | [RHSA-2026:73766](https://patchblox.com/security/data/fix/linux/rhsa-2026-73766.md) | Sep 30, 2026 |
| Linux | idm-pki-java almalinux 10 | 11.9.0-5.el10_2.alma.1 | [ALSA-2026:73765](https://patchblox.com/security/data/fix/linux/alsa-2026-73765.md) | Sep 30, 2026 |
| Linux | idm-pki-java almalinux 9 | 11.7.1-2.el9_8 | [ALSA-2026:73766](https://patchblox.com/security/data/fix/linux/alsa-2026-73766.md) | Sep 30, 2026 |
| Linux | idm-pki-java ol 10 | 0:11.9.0-5.0.1.el10_2 | [ELSA-2026-73765](https://patchblox.com/security/data/fix/linux/elsa-2026-73765.md) | Sep 30, 2026 |
| Linux | idm-pki-java ol 9 | 0:11.7.1-2.0.1.el9_8 | [ELSA-2026-73766](https://patchblox.com/security/data/fix/linux/elsa-2026-73766.md) | Sep 30, 2026 |
| Linux | idm-pki-kra RHEL 9 | 0:11.7.1-2.el9_8 | [RHSA-2026:73766](https://patchblox.com/security/data/fix/linux/rhsa-2026-73766.md) | Sep 30, 2026 |
| Linux | idm-pki-kra almalinux 10 | 11.9.0-5.el10_2.alma.1 | [ALSA-2026:73765](https://patchblox.com/security/data/fix/linux/alsa-2026-73765.md) | Sep 30, 2026 |
| Linux | idm-pki-kra almalinux 9 | 11.7.1-2.el9_8 | [ALSA-2026:73766](https://patchblox.com/security/data/fix/linux/alsa-2026-73766.md) | Sep 30, 2026 |
| Linux | idm-pki-kra ol 10 | 0:11.9.0-5.0.1.el10_2 | [ELSA-2026-73765](https://patchblox.com/security/data/fix/linux/elsa-2026-73765.md) | Sep 30, 2026 |
| Linux | idm-pki-kra ol 9 | 0:11.7.1-2.0.1.el9_8 | [ELSA-2026-73766](https://patchblox.com/security/data/fix/linux/elsa-2026-73766.md) | Sep 30, 2026 |
| Linux | idm-pki-server RHEL 9 | 0:11.7.1-2.el9_8 | [RHSA-2026:73766](https://patchblox.com/security/data/fix/linux/rhsa-2026-73766.md) | Sep 30, 2026 |
| Linux | idm-pki-server almalinux 10 | 11.9.0-5.el10_2.alma.1 | [ALSA-2026:73765](https://patchblox.com/security/data/fix/linux/alsa-2026-73765.md) | Sep 30, 2026 |
| Linux | idm-pki-server almalinux 9 | 11.7.1-2.el9_8 | [ALSA-2026:73766](https://patchblox.com/security/data/fix/linux/alsa-2026-73766.md) | Sep 30, 2026 |
| Linux | idm-pki-server ol 10 | 0:11.9.0-5.0.1.el10_2 | [ELSA-2026-73765](https://patchblox.com/security/data/fix/linux/elsa-2026-73765.md) | Sep 30, 2026 |
| Linux | idm-pki-server ol 9 | 0:11.7.1-2.0.1.el9_8 | [ELSA-2026-73766](https://patchblox.com/security/data/fix/linux/elsa-2026-73766.md) | Sep 30, 2026 |
| Linux | idm-pki-tools RHEL 9 | 0:11.7.1-2.el9_8 | [RHSA-2026:73766](https://patchblox.com/security/data/fix/linux/rhsa-2026-73766.md) | Sep 30, 2026 |
| Linux | idm-pki-tools almalinux 10 | 11.9.0-5.el10_2.alma.1 | [ALSA-2026:73765](https://patchblox.com/security/data/fix/linux/alsa-2026-73765.md) | Sep 30, 2026 |
| Linux | idm-pki-tools almalinux 9 | 11.7.1-2.el9_8 | [ALSA-2026:73766](https://patchblox.com/security/data/fix/linux/alsa-2026-73766.md) | Sep 30, 2026 |
| Linux | idm-pki-tools ol 10 | 0:11.9.0-5.0.1.el10_2 | [ELSA-2026-73765](https://patchblox.com/security/data/fix/linux/elsa-2026-73765.md) | Sep 30, 2026 |
| Linux | idm-pki-tools ol 9 | 0:11.7.1-2.0.1.el9_8 | [ELSA-2026-73766](https://patchblox.com/security/data/fix/linux/elsa-2026-73766.md) | Sep 30, 2026 |
| Linux | pki-core rocky 9 | 0:11.7.1-2.el9_8 | [RLSA-2026:73766](https://patchblox.com/security/data/fix/linux/rlsa-2026-73766.md) | Oct 1, 2026 |
| Linux | python3-idm-pki RHEL 9 | 0:11.7.1-2.el9_8 | [RHSA-2026:73766](https://patchblox.com/security/data/fix/linux/rhsa-2026-73766.md) | Sep 30, 2026 |
| Linux | python3-idm-pki almalinux 10 | 11.9.0-5.el10_2.alma.1 | [ALSA-2026:73765](https://patchblox.com/security/data/fix/linux/alsa-2026-73765.md) | Sep 30, 2026 |
| Linux | python3-idm-pki almalinux 9 | 11.7.1-2.el9_8 | [ALSA-2026:73766](https://patchblox.com/security/data/fix/linux/alsa-2026-73766.md) | Sep 30, 2026 |
| Linux | python3-idm-pki ol 10 | 0:11.9.0-5.0.1.el10_2 | [ELSA-2026-73765](https://patchblox.com/security/data/fix/linux/elsa-2026-73765.md) | Sep 30, 2026 |
| Linux | python3-idm-pki ol 9 | 0:11.7.1-2.0.1.el9_8 | [ELSA-2026-73766](https://patchblox.com/security/data/fix/linux/elsa-2026-73766.md) | Sep 30, 2026 |

---

Data as of 2026-11-10T01:44:33Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.