PT-2026-26343 · Step Ca · Step Ca

Prasanthsundararajan69 · Published 2026-03-19 · Updated 2026-04-27 · CVE-2026-30836

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Step CA versions 0.30.0-rc6 and below

Description Step CA is an online certificate authority designed for secure, automated certificate management. A flaw exists where the software does not adequately protect against unauthenticated certificate issuance through the SCEP UpdateReq (MessageType=18). This allows attackers to potentially obtain valid certificates for any domain without providing credentials. The SCEP UpdateReq bypasses all authentication checks within Step CA.

Recommendations Versions prior to 0.30.0 should be upgraded to version 0.30.0.

Exploit

Fix

Improper Certificate Validation

Improper Authentication

Weakness Enumeration

CWE-295

CWE-287

Related Identifiers

CLEANSTART-2026-CE02533

CLEANSTART-2026-CV29689

CLEANSTART-2026-UZ79996

CVE-2026-30836

GHSA-Q4R8-XM5F-56GW

GO-2026-4775

SUSE-SU-2026:1135-1

Affected Products

Step Ca

References · 192

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/30xxx/CVE-2026-30836.json · Exploit
• https://github.com/smallstep/certificates/commit/e6da031d5125cfd99fe9a26f74bb41e4dacca4ef · Patch
• https://github.com/smallstep/certificates/security/advisories/GHSA-q4r8-xm5f-56gw · Vendor Advisory
• https://osv.dev/vulnerability/GO-2026-4775 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-33186 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-58187 · Security Note
• https://ubuntu.com/security/CVE-2026-30836 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-30836 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1135-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-30836 · Security Note
• https://osv.dev/vulnerability/CLEANSTART-2026-CE02533 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-q4r8-xm5f-56gw · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-58189 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-62820 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-58183 · Security Note