Поиск уязвимостей
Количество 21
Количество 21
CVE-2026-3012
A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability to intercept or redirect network traffic could exploit this behavior to supply a malicious certificate authority certificate, potentially allowing interception or spoofing of trusted communications.
CVE-2026-3012
A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability to intercept or redirect network traffic could exploit this behavior to supply a malicious certificate authority certificate, potentially allowing interception or spoofing of trusted communications.
CVE-2026-3012
A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability to intercept or redirect network traffic could exploit this behavior to supply a malicious certificate authority certificate, potentially allowing interception or spoofing of trusted communications.
CVE-2026-3012
A flaw was found in Samba\u2019s certificate auto-enrollment Group Pol ...
GHSA-59rx-q76w-hqrw
A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability to intercept or redirect network traffic could exploit this behavior to supply a malicious certificate authority certificate, potentially allowing interception or spoofing of trusted communications.
BDU:2026-07422
Уязвимость компонента управления групповыми политиками (GPO) программного обеспечения Samba, позволяющая нарушителю обойти существующие ограничения безопасности
ROS-20260921-80-0138
Уязвимость samba
ROS-20260921-73-0110
Уязвимость samba
ELSA-2026-22644
ELSA-2026-22644: samba security update (IMPORTANT)
SUSE-SU-2026:2074-1
Security update for samba
SUSE-SU-2026:2072-1
Security update for samba
RLSA-2026:22644
Important: samba security update
openSUSE-SU-2026:20905-1
Security update for samba
SUSE-SU-2026:2076-1
Security update for samba
RLSA-2026:25049
Critical: samba security update
RLSA-2026:22963
Critical: samba security update
ELSA-2026-25049
ELSA-2026-25049: samba security update (CRITICAL)
ELSA-2026-22963
ELSA-2026-22963: samba security update (CRITICAL)
ALT-PU-2025-10509
ALT-PU-2025-10509: package `samba` update to version 4.21.7-alt4
ALT-PU-2026-8758
ALT-PU-2026-8758: package `samba` update to version 4.19.9-alt12
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2026-3012 A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability to intercept or redirect network traffic could exploit this behavior to supply a malicious certificate authority certificate, potentially allowing interception or spoofing of trusted communications. | CVSS3: 6.8 | 0% Низкий | 6 месяцев назад | |
CVE-2026-3012 A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability to intercept or redirect network traffic could exploit this behavior to supply a malicious certificate authority certificate, potentially allowing interception or spoofing of trusted communications. | CVSS3: 8 | 0% Низкий | 6 месяцев назад | |
CVE-2026-3012 A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability to intercept or redirect network traffic could exploit this behavior to supply a malicious certificate authority certificate, potentially allowing interception or spoofing of trusted communications. | CVSS3: 6.8 | 0% Низкий | 6 месяцев назад | |
CVE-2026-3012 A flaw was found in Samba\u2019s certificate auto-enrollment Group Pol ... | CVSS3: 6.8 | 0% Низкий | 6 месяцев назад | |
GHSA-59rx-q76w-hqrw A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability to intercept or redirect network traffic could exploit this behavior to supply a malicious certificate authority certificate, potentially allowing interception or spoofing of trusted communications. | CVSS3: 8 | 0% Низкий | 6 месяцев назад | |
BDU:2026-07422 Уязвимость компонента управления групповыми политиками (GPO) программного обеспечения Samba, позволяющая нарушителю обойти существующие ограничения безопасности | CVSS3: 8 | 0% Низкий | 6 месяцев назад | |
ROS-20260921-80-0138 Уязвимость samba | CVSS3: 8 | 0% Низкий | около 2 месяцев назад | |
ROS-20260921-73-0110 Уязвимость samba | CVSS3: 8 | 0% Низкий | около 2 месяцев назад | |
ELSA-2026-22644 ELSA-2026-22644: samba security update (IMPORTANT) | 5 месяцев назад | |||
SUSE-SU-2026:2074-1 Security update for samba | 6 месяцев назад | |||
SUSE-SU-2026:2072-1 Security update for samba | 6 месяцев назад | |||
RLSA-2026:22644 Important: samba security update | 5 месяцев назад | |||
openSUSE-SU-2026:20905-1 Security update for samba | 5 месяцев назад | |||
SUSE-SU-2026:2076-1 Security update for samba | 6 месяцев назад | |||
RLSA-2026:25049 Critical: samba security update | 5 месяцев назад | |||
RLSA-2026:22963 Critical: samba security update | 5 месяцев назад | |||
ELSA-2026-25049 ELSA-2026-25049: samba security update (CRITICAL) | 5 месяцев назад | |||
ELSA-2026-22963 ELSA-2026-22963: samba security update (CRITICAL) | 4 месяца назад | |||
ALT-PU-2025-10509 ALT-PU-2025-10509: package `samba` update to version 4.21.7-alt4 | CVSS3: 10 | около 1 года назад | ||
ALT-PU-2026-8758 ALT-PU-2026-8758: package `samba` update to version 4.19.9-alt12 | CVSS3: 10 | 5 месяцев назад |
Уязвимостей на страницу