Поиск уязвимостей
Количество 49
Количество 49
SUSE-SU-2026:2074-1
Security update for samba
SUSE-SU-2026:2072-1
Security update for samba
openSUSE-SU-2026:20905-1
Security update for samba
SUSE-SU-2026:2076-1
Security update for samba
ALT-PU-2026-8758
ALT-PU-2026-8758: package `samba` update to version 4.19.9-alt12
openSUSE-SU-2026:21540-1
Security update for samba
ELSA-2026-22644
ELSA-2026-22644: samba security update (IMPORTANT)
RLSA-2026:22644
Important: samba security update
RLSA-2026:25049
Critical: samba security update
RLSA-2026:22963
Critical: samba security update
ELSA-2026-25049
ELSA-2026-25049: samba security update (CRITICAL)
ELSA-2026-22963
ELSA-2026-22963: samba security update (CRITICAL)
SUSE-SU-2026:2108-1
Security update for samba
SUSE-SU-2026:2073-1
Security update for samba
CVE-2026-3012
A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability to intercept or redirect network traffic could exploit this behavior to supply a malicious certificate authority certificate, potentially allowing interception or spoofing of trusted communications.
CVE-2026-3012
A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability to intercept or redirect network traffic could exploit this behavior to supply a malicious certificate authority certificate, potentially allowing interception or spoofing of trusted communications.
CVE-2026-3012
A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability to intercept or redirect network traffic could exploit this behavior to supply a malicious certificate authority certificate, potentially allowing interception or spoofing of trusted communications.
CVE-2026-3012
A flaw was found in Samba\u2019s certificate auto-enrollment Group Pol ...
ALT-PU-2025-10509
ALT-PU-2025-10509: package `samba` update to version 4.21.7-alt4
GHSA-59rx-q76w-hqrw
A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability to intercept or redirect network traffic could exploit this behavior to supply a malicious certificate authority certificate, potentially allowing interception or spoofing of trusted communications.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | SUSE-SU-2026:2074-1 Security update for samba | 6 месяцев назад | ||
| SUSE-SU-2026:2072-1 Security update for samba | 6 месяцев назад | ||
| openSUSE-SU-2026:20905-1 Security update for samba | 5 месяцев назад | ||
| SUSE-SU-2026:2076-1 Security update for samba | 6 месяцев назад | ||
| ALT-PU-2026-8758 ALT-PU-2026-8758: package `samba` update to version 4.19.9-alt12 | CVSS3: 10 | 5 месяцев назад | |
| openSUSE-SU-2026:21540-1 Security update for samba | 3 месяца назад | ||
| ELSA-2026-22644 ELSA-2026-22644: samba security update (IMPORTANT) | 5 месяцев назад | ||
 | RLSA-2026:22644 Important: samba security update | 5 месяцев назад | ||
| RLSA-2026:25049 Critical: samba security update | 5 месяцев назад | ||
| RLSA-2026:22963 Critical: samba security update | 5 месяцев назад | ||
| ELSA-2026-25049 ELSA-2026-25049: samba security update (CRITICAL) | 5 месяцев назад | ||
| ELSA-2026-22963 ELSA-2026-22963: samba security update (CRITICAL) | 4 месяца назад | ||
| SUSE-SU-2026:2108-1 Security update for samba | 5 месяцев назад | ||
| SUSE-SU-2026:2073-1 Security update for samba | 6 месяцев назад | ||
 | CVE-2026-3012 A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability to intercept or redirect network traffic could exploit this behavior to supply a malicious certificate authority certificate, potentially allowing interception or spoofing of trusted communications. | CVSS3: 6.8 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-3012 A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability to intercept or redirect network traffic could exploit this behavior to supply a malicious certificate authority certificate, potentially allowing interception or spoofing of trusted communications. | CVSS3: 8 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-3012 A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability to intercept or redirect network traffic could exploit this behavior to supply a malicious certificate authority certificate, potentially allowing interception or spoofing of trusted communications. | CVSS3: 6.8 | 0% Низкий | 6 месяцев назад |
| CVE-2026-3012 A flaw was found in Samba\u2019s certificate auto-enrollment Group Pol ... | CVSS3: 6.8 | 0% Низкий | 6 месяцев назад |
| ALT-PU-2025-10509 ALT-PU-2025-10509: package `samba` update to version 4.21.7-alt4 | CVSS3: 10 | около 1 года назад | |
| GHSA-59rx-q76w-hqrw A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability to intercept or redirect network traffic could exploit this behavior to supply a malicious certificate authority certificate, potentially allowing interception or spoofing of trusted communications. | CVSS3: 8 | 0% Низкий | 6 месяцев назад |
Уязвимостей на страницу