smallstep records
2 published records for vendor smallstep.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Attack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2026-30836No exploit | Step CA: Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18)smallstep · step-ca · CWE-287 | Critical10.0 | — | 0.3% | Mar 19, 2026 |
14Monitor | CVE-2026-40097No exploit | Step CA affected by an index out of bounds panic in TPM attestation EKU validationsmallstep · step-ca · CWE-129 | Low3.7 | — | 0.3% | Apr 10, 2026 |
- CVE-2026-3083640Plan
Step CA: Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18)
CriticalCVSS 10.0No exploitEPSS 0%smallstep · step-caMar 19, 2026
- CVE-2026-4009714Monitor
Step CA affected by an index out of bounds panic in TPM attestation EKU validation
LowCVSS 3.7No exploitEPSS 0%smallstep · step-caApr 10, 2026