← Database

CVE-2026-30836

CRITICAL CVSS: 10.0 Published: 2026-03-19 Modified: 2026-06-17

Description

Step CA is an online certificate authority for secure, automated certificate management for DevOps. Versions 0.30.0-rc6 and below do not safeguard against unauthenticated certificate issuance through the SCEP UpdateReq. This issue has been fixed in version 0.30.0.

Affected Platforms

Smallstep Step-Ca

Weakness Type

CWE-287, CWE-295, CWE-295

References