CVE-2018-10868

CVE-2018-10868 is a denial-of-service vulnerability affecting Red Hat Certification 7, stemming from insufficient restrictions on recursive entity definitions in XML documents. An unauthenticated attacker can exploit this by sending specially crafted XMLRPC requests, leading to a "Billion Laughs Attack" and causing a high-impact denial of service. While no public exploits or active exploitation have been observed, and community discussion is minimal, the vulnerability carries a CVSS score of 7.5 (High) due to its network-based attack vector and low attack complexity.