ZeroDay Findings
Sign inSign up

Findings

CVE-2026-3012

A flaw was found in Samba’s certificate auto-enrollment Group Policy handling.

Published May 27, 2026 · updated Oct 15, 2026 · redhat openshift container platform

A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability to intercept or redirect network traffic could exploit this behavior to supply a malicious certificate authority certificate, potentially allowing interception or spoofing of trusted communications.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. May 27, 2026 · NIST NVD

    Detected

    A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability to intercept or redirect network traffic could exploit this behavior to supply a malicious certificate a

  2. Oct 15, 2026 · NIST NVD

    Updated

    A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability to intercept or redirect network traffic could exploit this behavior to supply a malicious certificate a

Affected

  • cpe redhat/enterprise linux7.0
  • cpe redhat/enterprise linux9.0
  • cpe redhat/openshift container platform4.0
  • cpe samba/sambaversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-3012

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-3012

    A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker w

    nvd.nist.gov

References