Vulnerability in Samba
CVE-2026-3012
A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability to intercept or redirect network traffic could exploit this behavior to supply a malicious certificate authority certificate, potentially allowing interception or spoofing of trusted communications.
EPSS: 0.003 (17.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.0 (High). Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N.
Affected products
- Samba
- Red Hat Enterprise Linux 10 — versions 0:4.23.5-109.el10_2
- Red Hat Enterprise Linux 10.0 Extended Update Support — versions 0:4.21.3-114.el10_0.1
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8 — versions 0:4.19.4-16.el8_10
- Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support — versions 0:4.15.5-16.el8_6.1
- Red Hat Enterprise Linux 8.6 Extended Update Support Long-life Add-on — versions 0:4.15.5-16.el8_6.1
- Red Hat Enterprise Linux 8.8 Telecommunications Update Service — versions 0:4.17.5-7.el8_8.1
- Red Hat Enterprise Linux 8.8 Update Services For Sap Solutions — versions 0:4.17.5-7.el8_8.1
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_REDHAT, Third Party Advisory, vdb-entry, Mitigation, Vendor Advisory)
- secalert@redhat.com (x_refsource_REDHAT, issue-tracking, Third Party Advisory, Issue Tracking, Vendor Advisory)
- secalert@redhat.com (Mitigation, Issue Tracking, Vendor Advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Issue Tracking)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Issue Tracking)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
Frequently asked questions
- What is CVE-2026-3012?
- CVE-2026-3012 is a high-severity vulnerability in Samba, classified under Insufficient Verification of Data Authenticity. CVSS score: 8.0/10. Published 2026-05-27.
- How severe is CVE-2026-3012?
- High severity. CVSS v3 base score is 8.0 out of 10.