CVE-2026-3012
A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability to intercept or redirect network traffic could exploit this behavior to supply a malicious certificate authority certificate, potentially allowing interception or spoofing of trusted communications.
Key facts
- CVSS score
- 8.0 (v3.1)
- Severity
- HIGH
- CVSS vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N- Weakness (CWE)
- CWE-345
- EPSS score
- 0.2% (12th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2026-32211)
- Published
- May 27, 2026
- NVD last modified
- October 8, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2026-32211 in the EU Vulnerability Database. Last updated in EUVD on October 8, 2026.
View on the EU Vulnerability DatabaseAffected products
- redhat / enterprise linux
- redhat / enterprise linux
- redhat / openshift container platform
- samba / samba
Certified products that may be affected
8 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.
- Red Hat Enterprise Linux 9 Kernel Cryptographic API - Red Hat, Inc. - FIPS 140 5445 - active
- Red Hat Enterprise Linux 9 libgcrypt - Red Hat, Inc. - FIPS 140 5366 - active
- Red Hat Enterprise Linux 9 Kernel Cryptographic API - Red Hat, Inc. - FIPS 140 5034 - active
- Red Hat Enterprise Linux 9 NSS Cryptographic Module - Red Hat, Inc - FIPS 140 5022 - active
- Red Hat Enterprise Linux 9 gnutls - Red Hat, Inc. - FIPS 140 4846 - active
See all 8 in the Security Certifications Explorer.
References
- https://access.redhat.com/errata/RHSA-2026:22644(Issue Tracking)
- https://access.redhat.com/errata/RHSA-2026:22963(Issue Tracking)
- https://access.redhat.com/errata/RHSA-2026:25049
- https://access.redhat.com/errata/RHSA-2026:25979
- https://access.redhat.com/errata/RHSA-2026:28053
- https://access.redhat.com/errata/RHSA-2026:28054
- https://access.redhat.com/errata/RHSA-2026:28055
- https://access.redhat.com/errata/RHSA-2026:28056
- https://access.redhat.com/errata/RHSA-2026:28057
- https://access.redhat.com/errata/RHSA-2026:29863
- https://access.redhat.com/errata/RHSA-2026:56786
- https://access.redhat.com/errata/RHSA-2026:56853
- https://access.redhat.com/errata/RHSA-2026:56911
- https://access.redhat.com/errata/RHSA-2026:57483
- https://access.redhat.com/errata/RHSA-2026:59831
- https://access.redhat.com/errata/RHSA-2026:60019
- https://access.redhat.com/errata/RHSA-2026:62409
- https://access.redhat.com/errata/RHSA-2026:62549
- https://access.redhat.com/errata/RHSA-2026:65839
- https://access.redhat.com/errata/RHSA-2026:65851
- https://access.redhat.com/errata/RHSA-2026:65907
- https://access.redhat.com/errata/RHSA-2026:67857
- https://access.redhat.com/errata/RHSA-2026:70586
- https://access.redhat.com/security/cve/CVE-2026-3012(Mitigation, Third Party Advisory)
- https://bugzilla.redhat.com/show_bug.cgi?id=2447319(Issue Tracking, Third Party Advisory)
- https://bugzilla.samba.org/show_bug.cgi?id=16003(Issue Tracking, Mitigation, Vendor Advisory)
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3012.json
Last updated October 10, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain