CVE•Published 2026-05-27•Modified 2026-10-01•1 article on news•6 live references•NVD data
CVE-2026-3012Redhat · Openshift_container_platform
Vulnerability data via NVD (ingested)
CVSS v3.1
8.0
HIGH
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
EPSS percentile
12
Exploit Prediction Scoring System · top 88% of all CVEs
Weaknesses (CWE)
Description
A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability to intercept or redirect network traffic could exploit this behavior to supply a malicious certificate authority certificate, potentially allowing interception or spoofing of trusted communications.
Timeline
Published 2026-05-27
Modified 2026-10-01
External references
Search for exposed instances
Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).
Shodan · vuln tag0 hosts
vuln:CVE-2026-3012Hosts Shodan has explicitly fingerprinted as vulnerable.
Shodan · product + version
product:"Redhat Openshift Container Platform" version:"4.0"Version-pinned fingerprint from NVD's first vulnerable CPE.
Shodan · banner/body mention
http.html:"Openshift Container Platform"HTTP body or banner mentions "Openshift Container Platform" — catches deploys Shodan didn't identify as a product.
More intel sources (5)
Shodan report
vuln:CVE-2026-3012Country / ASN / product breakdown for the vuln query.
Censys
vulnerabilities.cve_id: CVE-2026-3012Censys host search filtered to this CVE id.
grep.app
CVE-2026-3012Public source-code mentions — fast PoC discovery.
GitHub code
CVE-2026-3012GitHub code search for direct mentions.
Google dork
"CVE-2026-3012" exploit -site:nvd.nist.govWrite-ups and news, NVD excluded.
Known PoCs on GitHub (8)
CVE-2026-30128 repos
Supersonic/TLPEKotlin
CVE-2026-49881, using insecure context creation in Android 17's Telecom service to execute arbitrary code as UID 1000 system_server from an unprivileged app
vmihalis/hacker-bobJavaScript
A local MCP runtime that attacks what you own and only reports what it proved. 17 CVEs across 9 projects came out of this repo. Install: npx -y hacker-bob@latest install /path/to/p…
cool-japan/oxirsRust
Rust-native, modular platform for Semantic Web, SPARQL 1.2, GraphQL, and AI-augmented reasoning
hiifong/starListPython
Export your star's repository list
oslook/n8n-workflowsunknown
4200 + Workflow Automation Templates are Grouped by Categories/Services for easy navigation
timoguin/starsunknown
My starred repositories
brimstone/starsunknown
My starred GitHub repositories
js-recon/js-recon-labsJavaScript
Labs for JS Recon (https://github.com/js-recon/js-recon)