VendorsSmallstepstep-caany version
Vulnerabilities

Smallstep Step CA any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2026-30836
Step CA: Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18)
Published 2026-03-19 · Analyzed
10.0EPSS 0.003
CVE-2026-40097
Step CA affected by an index out of bounds panic in TPM attestation EKU validation
Published 2026-04-10 · Analyzed
3.7EPSS 0.003