SB2026071567 - Red Hat OpenStack Services onOpenShift 18 update for erlang
Published: July 15, 2026
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 2 vulnerabilities.
1) Improper Certificate Validation (CVE-ID: CVE-2026-42789)
CWE-ID: CWE-295 - Improper Certificate Validation
CVSSv4: 6 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote user to spoof arbitrary certificate identities.
The vulnerability exists due to improper certificate validation in public_key:pkix_path_validation/3 when validating certificate chains. A remote user can use a non-CA end-entity certificate and its private key to forge leaf certificates for arbitrary identities to spoof arbitrary certificate identities.
Exploitation requires possession of an end-entity certificate issued by a CA in the victim's trust store where basicConstraints is set to cA:false and the keyUsage extension is absent.
2) Improper validation of certificate with host mismatch (CVE-ID: CVE-2026-42790)
CWE-ID: CWE-297 - Improper Validation of Certificate with Host Mismatch
CVSSv4: 8.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to bypass certificate hostname validation.
The vulnerability exists due to improper validation of certificate with host mismatch in public_key:pkix_verify_hostname/3 when processing TLS certificates that lack a Subject Alternative Name extension or contain no domain name in that extension. A remote attacker can present a specially crafted certificate during a man-in-the-middle position to bypass certificate hostname validation.
Exploitation requires the ability to intercept network traffic and, in the worst case, control a DNS-constrained sub-CA key.
Remediation
Install update from vendor's website.