smallstep certificates vulnerabilities
3 published CVEs name smallstep certificates among the affected products.
- 3Published CVEs3 of them scored
- 3Last 12 monthspublished in the last year
- 1Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-40097
Step CA affected by an index out of bounds panic in TPM attestation EKU validation
smallstep · certificates
Low3.7 - CVE-2026-30836
Step CA: Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18)
smallstep · certificates
Critical10.0 - CVE-2025-66406
Improper Authorization Check for SSH Certificate Revocation
smallstep · certificates
Medium5.0