CVEPublished 2026-05-27Modified 2026-06-081 article on news6 live referencesNVD data

CVE-2026-3012Redhat · Openshift_container_platform

Vulnerability data via NVD (ingested)

CVSS v3.1
8.0
HIGH
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
EPSS percentile
0
Exploit Prediction Scoring System · top 100% of all CVEs
Description

A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability to intercept or redirect network traffic could exploit this behavior to supply a malicious certificate authority certificate, potentially allowing interception or spoofing of trusted communications.

Timeline
Published 2026-05-27
Modified 2026-06-08

External references

Search for exposed instances

Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).

More intel sources (5)

Known PoCs on GitHub (7)