Vulnerability Report

CVE-2026-3012

Title: CA Certificate Spoofing via Unencrypted HTTP in Samba

Other

Proof Of Concept

No public PoC currently indexed for CVE-2026-3012.

CWE Category NVD-CWE-noinfo

Published Date May 27, 2026

Modified Date Jul 15, 2026

Exploit Status Not Found

Score 8.0 CVSS v3.1

Exploit Probability (EPSS)

0.26%

Vulnerability Summary

CVE-2026-3012: A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability to intercept or redirect network traffic could exploit this behavior to supply a malicious certificate authority certificate, potentially allowing interception or spoofing of trusted communications.

Impacted Vendors

samba 1

sgi 1

redhat 1

Reference Links

https://access.redhat.com/security/cve/CVE-2026-3012 https://bugzilla.redhat.com/show_bug.cgi?id=2447319 https://bugzilla.samba.org/show_bug.cgi?id=16003

CVSS v3.1

Source Entity [email protected]

Severity HIGH

8.0

Attack Vector

ADJACENT_NETWORK

Complexity

HIGH

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

CHANGED

RAW VECTOR CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

CVSS v3.1

Source Entity [email protected]

Severity MEDIUM

6.8

Attack Vector

ADJACENT_NETWORK

Complexity

HIGH

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

UNCHANGED

RAW VECTOR CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CVSS v3.1

Source Entity 0b0ca135-0b70-47e7-9f44-1890c2a1c46c

Severity HIGH

8.0

Attack Vector

ADJACENT_NETWORK

Complexity

HIGH

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

CHANGED

RAW VECTOR CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

Associated Attack Patterns (CAPEC)

Total: Patterns