diff --git a/0015-CVE-2026-1709.patch b/0015-CVE-2026-1709.patch
new file mode 100644
index 0000000..b494256
--- /dev/null
+++ b/0015-CVE-2026-1709.patch
@@ -0,0 +1,20 @@
+diff --git a/keylime/web/base/server.py b/keylime/web/base/server.py
+index 1d9a9c2..859b23a 100644
+--- a/keylime/web/base/server.py
++++ b/keylime/web/base/server.py
+@@ -2,7 +2,6 @@ import asyncio
+ import multiprocessing
+ from abc import ABC, abstractmethod
+ from functools import wraps
+-from ssl import CERT_OPTIONAL
+ from typing import TYPE_CHECKING, Any, Callable, Optional
+
+ import tornado
+@@ -252,7 +251,6 @@ class Server(ABC):
+         self._https_port = config.getint(component, "tls_port", fallback=0)
+         self._max_upload_size = config.getint(component, "max_upload_size", fallback=104857600)
+         self._ssl_ctx = web_util.init_mtls(component)
+-        self._ssl_ctx.verify_mode = CERT_OPTIONAL
+
+     def _get(self, pattern: str, controller: type["Controller"], action: str, allow_insecure: bool = False) -> None:
+         """Creates a new route to handle incoming GET requests issued for paths which match the given
diff --git a/keylime.spec b/keylime.spec
index 88bb78b..f9b53a0 100644
--- a/keylime.spec
+++ b/keylime.spec
@@ -14,7 +14,7 @@
 
 Name:    keylime
 Version: 7.12.1
-Release: 11%{?dist}.3
+Release: 11%{?dist}.4
 Summary: Open source TPM software for Bootstrapping and Maintaining Trust
 
 URL:            https://github.com/keylime/keylime
@@ -60,6 +60,9 @@ Patch: 0012-keylime-policy-avoid-opening-dev-stdout.patch
 Patch: 0013-Add-shared-memory-infrastructure-for-multiprocess-co.patch
 Patch: 0014-Fix-registrar-duplicate-UUID-vulnerability.patch
 
+# CVE-2026-1709
+Patch: 0015-CVE-2026-1709.patch
+
 # Main program: Apache-2.0
 # Icons: MIT
 License: Apache-2.0 AND MIT
@@ -477,6 +480,9 @@ fi
 
 %changelog
 ## START: Generated by rpmautospec
+* Tue Feb 03 2026 Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 7.12.1-16
+- CVE-2026-1709: Registrar authentication bypass
+
 * Thu Dec 11 2025 Sergio Correia <scorreia@redhat.com> - 7.12.1-15
 - Registrar allows identity takeover via duplicate UUID registration