PT-2026-26343 · Step Ca · Step Ca

Prasanthsundararajan69 · Publicado 2026-03-19 · Atualizado 2026-04-27 · CVE-2026-30836

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Step CA versions 0.30.0-rc6 and below

Description Step CA is an online certificate authority designed for secure, automated certificate management. A flaw exists where the software does not adequately protect against unauthenticated certificate issuance through the SCEP UpdateReq (MessageType=18). This allows attackers to potentially obtain valid certificates for any domain without providing credentials. The SCEP UpdateReq bypasses all authentication checks within Step CA.

Recommendations Versions prior to 0.30.0 should be upgraded to version 0.30.0.

Exploit

Correção

Improper Certificate Validation

Improper Authentication

Enumeração de Fraquezas

CWE-295

CWE-287

Identificadores relacionados

CLEANSTART-2026-CE02533

CLEANSTART-2026-CV29689

CLEANSTART-2026-UZ79996

CVE-2026-30836

GHSA-Q4R8-XM5F-56GW

GO-2026-4775

SUSE-SU-2026:1135-1

Produtos afetados

Step Ca

Referências · 192

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/30xxx/CVE-2026-30836.json · Exploit
• https://github.com/smallstep/certificates/commit/e6da031d5125cfd99fe9a26f74bb41e4dacca4ef · Correção
• https://github.com/smallstep/certificates/security/advisories/GHSA-q4r8-xm5f-56gw · Aviso do Fabricante
• https://github.com/smallstep/certificates · Nota
• https://github.com/smallstep/certificates/releases/tag/v0.30.0-rc7 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-UZ79996.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-CE02533.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-CV29689.json · Nota
• https://suse.com/security/cve/CVE-2026-32692 · Nota
• https://suse.com/security/cve/CVE-2026-33809 · Nota
• https://osv.dev/vulnerability/CVE-2025-58189 · Nota
• https://suse.com/security/cve/CVE-2026-24692 · Nota
• https://osv.dev/vulnerability/ghsa-p77j-4mvh-x3m3 · Nota
• https://osv.dev/vulnerability/CVE-2025-61724 · Nota
• https://suse.com/security/cve/CVE-2026-32769 · Nota