CVE-2026-113812

A flaw was found in Mozilla::CA. The Certificate Authority (CA) bundle includes a root certificate linked to compromised intermediate certificates. A remote attacker capable of intercepting or redirecting network traffic could exploit this flaw using the compromised keys to impersonate a Transport Layer Security (TLS) server, leading to the interception or disclosure of sensitive encrypted communications.

Red Hat Enterprise Linux environments are not affected by this issue because the packaged perl-Mozilla-CA components do not include any CA certificates, but they rather use the system certificate store.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.