CVE-2026-109142 - Krill treats a "local parent" as already-authenticated, letting a CA operator act as any child of any CA on the same server
CVE ID :CVE-2026-109142 Published : Nov. 2, 2026, 4:17 p.m. | 46 minutes ago Description :When a CA's parent lives on the same Krill server: instead of building and verifying a signed CMS message, it runs the RFC 6492 provisioning exchange in-process and trusts the child identity...